Self-extracting, encrypted tarballs. Much simpler than https://www.linuxjournal.com/node/1005818