>VMs it's easy ... use ZFS with encryption,
please don't use zfs native encryption. it's not production ready. https://docs.google.com/spreadsheets/d/1OfRSXibZ2nIE9DGK6swwBZXgXwdCPKgp4SbPZwTexCg/htmlview
furthermore, the backups on encrypted zfs are only encrypted on disk platters - but not in...