[cyphar]

Or use a filesystem that has immutable snapshots so you can just roll back the "encryption".