Zero trust, fully encrypted backup