With recent xochitl versions, rm2fb is not currently working.
However, gocryptfs still works fine.
reMarvin could be run as a service that reads the password from a monitored file, then stops xochitl, mounts the profile and starts xochitl again.
A way to log input e.g. from the log file is yet to be found and should ideally be located in tmpfs, otherwise should at least be shreddable.