Start-DbaDbEncryption: Add missing parameter and fix documentation (#10191)

Author: andreasjordan

public/New-DbaDbEncryptionKey.ps1

@@ -161,7 +161,7 @@ function New-DbaDbEncryptionKey {
                     $null = $db.Parent.Refresh()
                     $null = $db.Parent.Databases["master"].Refresh()
                 }
-                if ($dbcert.LastBackupDate.Year -eq 1 -and -not $Force) {
+                if ($dbcert.LastBackupDate.Year -eq 1 -and -not $Force -and -not $WhatIfPreference) {
                     Stop-Function -Message "Certificate ($EncryptorName) in master on $($db.Parent) has not been backed up. Please backup your certificate or use -Force to continue" -Continue
                 }
             }

public/Start-DbaDbEncryption.ps1

@@ -21,11 +21,11 @@ function Start-DbaDbEncryption {
         For MFA support, please use Connect-DbaInstance.
 
     .PARAMETER Database
-        Specifies which user databases to encrypt with Transparent Data Encryption (TDE). Accepts single database names, arrays, or wildcards.
+        Specifies which user databases to encrypt with Transparent Data Encryption (TDE).
         Use this when you need to encrypt specific databases instead of all user databases on the instance.
 
     .PARAMETER ExcludeDatabase
-        Specifies which databases to exclude from TDE encryption when using wildcards or AllUserDatabases.
+        Specifies which databases to exclude from TDE encryption when using AllUserDatabases.
         Useful when you want to encrypt most databases but need to skip specific ones due to compatibility or business requirements.
 
     .PARAMETER EncryptorName
@@ -168,6 +168,7 @@ function Start-DbaDbEncryption {
         [ValidateSet("AsymmetricKey", "Certificate")]
         [string]$EncryptorType = "Certificate",
         [string[]]$Database,
+        [string[]]$ExcludeDatabase,
         [Parameter(Mandatory)]
         [string]$BackupPath,
         [Parameter(Mandatory)]

tests/Start-DbaDbEncryption.Tests.ps1

@@ -16,6 +16,7 @@ Describe $CommandName -Tag UnitTests {
                 "EncryptorName",
                 "EncryptorType",
                 "Database",
+                "ExcludeDatabase",
                 "BackupPath",
                 "MasterKeySecurePassword",
                 "CertificateSubject",