Personally I've never had an issue just using encrypted containers but I'd be interested in a solution that behaved like Windows EFS while letting you define a

Personally I've never had an issue just using encrypted containers but I'd be interested in a solution that behaved like Windows EFS while letting you define a blacklist of programs that aren't allowed to see the decrypted file content.