Could you not have something like .Private-encrypted holding the encrypted versions .Private holding the unencrypted versions / the symlink then Private or the translated version being a symlink to the hidden .Private?
Could you not have something like
.Private-encrypted holding the encrypted versions
.Private holding the unencrypted versions / the symlink
then Private or the translated version being a symlink to the hidden .Private?