According to Sebastien's fscrypt presentation at LAD'20, the use of bounce buffers reduces fscrypt performance by up to 30%.

This can be replaced by using preallocated pages in enc_pool from Kerberos, so that pages do not need to be allocated/freed for every RPC.