an encrypted filesystem stored in a file