ecryptfs is easier if you use ecryptfs-utils. It's done BUT it needs testing.