make non-root mountable encrypted disk shares