Currently, to enable or disable Always Encrypted (AE) functionality when using Invoke-Sqlcmd, we must pass Column Encryption Setting=Enabled (or Disabled) via the connection string.
It would be more user-friendly and consistent to expose this as a dedicated -ColumnEncryptionSetting parameter on the Invoke-Sqlcmd cmdlet, similar to how other connection options are handled.