I need help to set up CF to work with MS SQL Always Encrypted columns

I went with this guide below to enable Always Encryted and configuration of data source in CF Administrator.

https://community.hostek.com/t/sql-server-always-encrypted-columns/315#heading--ColdFusion

But, I stack on the paragraph under the heading 

Using Always Encrypted Columns with ColdFusion

....

You must also ensure that the ColdFusion service account has access to the private key. This service usually runs under the ‘cfusion’ user so you will want to give read permissions for that user to the private key of the ‘Column Master Key’.

Do I need to create a standard user and login as that user and assign to the service ColdFusion 2016 Application Server? Does this service is reffered here as a "cfusion"?

Then, how would I give that user read permissions for the private key of the ‘Column Master Key’? Is that running certlm?

Any help would be greatly appreciated.

Thanks