Files are decrypted on-the-fly and never stored unencrypted.