Are we just talking here about the ability to have a context store that is encrypted in some way. I say 'just' but I realise that may not be trivial and it would be important to do it correctly. So one might imagine, in settings.js having something like
contextStorage: {
default: "memoryOnly",
memoryOnly: { module: 'memory' },
file: { module: 'localfilesystem', config: {encrypted: true, flushInterval: '60'} }
},