investigate encryption at rest

Currently, there's no encryption in Apptron. I think Cloudflare R2 encrypts at rest, which is nice but meaningless at the application level. The first point I realized we should encrypt was after implementing the user home mount and thinking about how it would be nice to store secrets there. However, one wrong move in the codebase and authorization could be granted to the home files on R2 via the API.

Since I've never done this before, I'm thinking about the overhead and whether we should just encrypt all data, including project data, and what kind of key scheme we'd use and how that would impact a multi-user system if the owner key was needed, etc. Just haven't had to think it through before.

I was just talking with somebody that mentioned using Apptron on a shared computer (library, classic example) and how that suggests we should be encrypting data at rest in the browser storage as well. So maybe we just see if we can encrypt everything.

Would love feedback from people that have done a system like this before. I noticed code in VSCode for encrypting stored secrets that I figured to reference. I have questions about overhead, managing keys, etc.

Ideally this could be implemented as filesystem middleware in Wanix.