Existing encrypted overlay filesystem solutions have tackled the easy problem: They encrypt. However, that alone doesn't hide a lot of interesting metadata: Which sized file was edited when. Let's dig into a filesystem design that balances practicality with hiding metadata in an untrusted storage provider setting.