...
/persist/vault - encrypted top-level directory for the parts needing encrypted
/persist/novault - mirror alternative for the parts not needing encryption (currently this is only proposed for volumes where encryption incurs some overhead for running ECOs).
Volumes
In /persist/vault/volumes/ and /persist/novault/volumes
...