With sync getting pretty good, I started thinking about the security implications of the sync folder. It seems prudent to ensure they are encrypted at rest, so I started investigating and found SQLCipher which it might be doable to use without too much effort.