What are my options for encrypting data at rest if fuse doesn't work?

[rabblehair]

Basically the cloud provider does not support fuse in any of their VMs because of the way they are configured. (My guess is they used a shared kernel, but I don't exactly know). Since rclone mount needs fuse to work, it won't work either. (So I guess it's your first option since they don't allow fuse)