Results With the PKI settings enabled, the Bacula File Daemon will encrypt the data as it sends it to the Storage Daemon. The filenames are stored to the backup medium in plain text, but the actual file is encrypted. An alternative to this is to write to a Softraid Crypto partition so that the entire backup is encrypted.