Have you played with knox? It's still new, but I invented an encrypted .bunker portable file format: https://gitlab.com/soapbox-pub/knox