Decrypting on the client. Create an encrypted container on the server (e.g. with gocryptfs), mount the drive on the client, decrypt the container and mount the decrypted container as a drive.