extended filesystem allowing permissions+encryptions