this looks interesting (and likely packageable), though I haven't looked deeper yet: https://github.com/SpiderOak/Encryptr