If it isn't encrypted by default, I don’t want it anywhere near my terminal.
It's funny how simple and effective this setup is ...