&gt; having filenames in plaintext<p>Why is this a limitation? Are you stating that each file in the &#x27;repo&#x27; is encrypted separately? I figured it was the entire repo as a directory, in which case, when it&#x27;s &#x27;at rest&#x27;, the whole thing is encrypted as a blob.