It's a reasonable indirection, putting encryption into the file system is controversial, see NTFS for the pitfalls.