Any idea if it's possible to duplicate/backup a noms database to an encrypted remote? Eg, if you wanted to just encrypt and duplicate the database to cloud storage, how might that work?

We already have to support moving between different versions of the noms format, which changes all the hashes. Encryption is the same. You can look at an encrypted remote as just a different version of the format, and use the same approach.

Star this bug, and when the migrate program is landed, you could basically just fork it to support encryption:

https://github.com/attic-labs/noms/issues/2272