For example, use a hash of the file as the encryption key, then encrypt that hash with the client's key.