I added advice to org-encrypt-entry (org-decrypt-entry) in order to make entries read only after encryption ( remove read only before decryption). This works perfectly fine, but I was wondering if it would be interesting to the maintainers to add this feature to org-crypt.