The latest release of Ensembles 2 now includes a class for encrypting data before uploading: CDEEncryptedCloudFileSystem. You can use this class to wrap your standard backend so that any data is encrypted with a symmetric AES key that is based on a password that you provide.
More information is available in the Ensembles book, and the class header file.