We are looking for a domain based EFS method so that one user can encrypt something under their domain name and another domain user can log in and open what the other person saved. Does PKI allow this? We do not want to add everyone to the share list of every single file.