@neil I like gocryptfs for this kind of thing. You create an encrypted folder, then mount it in its unencrypted form in another folder. Encryption is seamless once mounted, and backups work fine, even block based delta backups, because the encrypted files are just files.