eCryptfs on top of NFS isn't going to happen in the short term. Nearly all of the eCryptfs fixes are now in place, except for one last sticking point. The NFS maintainer is requiring that eCryptfs fix up a struct nameidata and pass it down into NFS, but that can get ugly and is something that the VFS maintainer is against. The VFS maintainer has alluded to a patch set that he is working on to do away with the nameidata passing, but it is not currently posted anywhere. When that happens, eCryptfs has a much better chance at supporting NFS.