Sensitive and encrypted catalog serve different purposes - Sensitive signals to the runtime that it should not show this value in logs etc. An encrypted catalog protects against the catalog at rest being read.