root/private: links for 256-encrypt