switch file operations to IOCipher encrypted virtual file system
receive files via SEND aka share intents and put into encrypted storage
bump minimum SDK to android-9/2.3 to get ParcelFileDescriptor.createPipe()