eCryptfs PAM-based Mount

eCryptfs can be set up to automatically mount on user login. The
default mount is an overlay mount on top of ~/Confidential/, and it
uses a passphrase-based key.

(from Lifehacker.com -> Tombuntu -> Dustin Kirkland)