> The point I think here is to protect sensitive data even against admins, the > guys who can read /vicep* anyway... We are using encfs [1] on top of AFS for scenarios like yours. Matthias [1] http://www.arg0.net/encfs