Encrypted data storage with all encryption done client side