[mcny]

What is your thought on this?

> Encrypt with a user specific key when the data enters the log. You can effectively delete all the user specific data by throwing the key away. No tracking down files or reprocessing necessary.

from https://news.ycombinator.com/item?id=15847674

[Sir_Substance]

From a technical perspective, that seems like a sensible compromise to me.