Right now, lockbox will smartly skip encrypting any files that aren't writable by the current user. To avoid a false sense of security, lockbox should present a list of the skipped files (before encryption) and ask the user to confirm. Maybe include a --force to skip the interactive check.