Have a configuration option that enables/disables filename encryption separately from data encryption.
This would allow admins to preserve the behavior of 2.14 (if they have used fscrypt in that context).