Hacker News Reader

I suggest you patch the call to rm with a call to srm:

Better to mount /dev/ram0 and do your encryption there. Then shred; rm -rf; umount for the win.

...or at least use shred(1) and then rm(1)

Six of one, half a dozen of the other?

Also note that there are interesting complications in relation to file data long-term storage on SSD drives. It should be investigated.

Or journaling file systems.