Worst case, could layer with encfs or equivalent. Be very careful to understand the exact threat model that covers (for starters, it leaves you painfully exposed to metadata issues), but it would work easily enough.
My plan is to use it with fusecrypt for now and eventually include encryption directly.