rclone.

Just use rclone if you need to turn object storage semantics usage into an encrypted mount.

It doesn't do well with non-object-storage access patterns but we're not putting an sqlite database on it here so that should be fine.

rclone has a `crypt` layer you can just paper over any of it's backends and still access through any of it's comfortable ways.

I'd personally likely bind mount the database folder over the rclone mount or the other way around, as needed to keep that database on a local filesystem.