Securely removes the encrypted file at path.
Overwrites up to the first 4 KiB of ciphertext before deletion. No-op if the file does not exist.