[jggimi]

I'd forgotten that vnconfig(8) includes its own encryption methodology. So with vnconfig(8) alone, you could use files as encrypted backing storage for vnd(4) virtual drives, as a replacement for the softraid(4) CRYPTO discipline.