[hiciu]

talk / context: https://streaming.media.ccc.de/asg2019/relive/164

edit: I think the most important part of the talk was an answer to question about why .ssh/authorized_keys won't be possible with this scheme (42:00):

> this is about protecting your data from the system as much as possible, so that when you are not logged in it's really cut off

This looks like, among other things, an ecryptfs replacement.