Add encryption layer

Because why not? This should probably use a symmetrical encryption, with a key given in the connection string. This will layer up with an actual storage layer. For example:

```
encrypt(key = "foo-bar"):filesystem
```
