Crypto "read" and "write" syscalls?

[]F4b10[]

Hi,
I have a lot of older/precompiled (read "legacy") programs on my system; this programs writes and reads from the filesystem.
I'm wondering about a method to bypass "read" and "write" with a cripto-version ones - if exist - to make unreadable (also from root) the data written by the programs.
I know about cryptoapi/dm-crypt, but this solution implies the crypto-filesystem must be mounted when the program writes or reads. If the script that runs the program, mount the crypto-filesystem before the program runs and umount it when it done, while program runs root can read clear data.

Is there anyone that knows a solution?
_________________
-----------------------------------
God saves,
but Buddha makes
incremental backups
-----------------------------------