Already do this.

Backup locally.

Encrypt file.

Delete original clear text backup.

Push encrypted file to cloud