I've been thinking about this problem from the document side. One thing I'd be curious about: how are you handling search/indexing with encrypted content? We're wrestling with this for PrivaVault (encrypted doc management, launching next week)