We couldn't use fcrypt when we had a SS20 as our main file server. Now it's fine and we use it by default. Why do you claim it provides little extra security? What is your threat model? Surely you can't think anyone is interested enough in your data to crack your session keys.