Oh, and I'll make encrypted paths use hash(path + secret) so it's deterministic, instead of encrypt(path) which has a random component