Support for encrypting a whole tree (closes #21)