I have a fake account named after my real name as it is written in my current state-issued d0x, and my primary account looks inconspicuous and is named in a daemon-like manner and has the home directory somewhere in /var. The fake account looks perfectly normal, with a Gnome xsession, a desktop littered with products of daily usage, a terminal window popping up after login etc etc, but .bashrc on that account double-shred -n2's sensitive data, after which it proceeds to DFE from my primary account. It also replaces itself with a normal .bashrc. It syncs file systems after each call to shred so that my software RAID can apply changes to the platters.
I hope that one day when I will be held at gunpoint I will log into that account on my computer and manage to destroy all evidence of whatever activities the investigators are upset with.
I also have an FUSE file system of my own design encrypted with a 4096 bit key. It is modeled after EncFS, but keeps data in the unused swap partition. IV is stored with other sensitive data, and once it is destroyed, it is impossible to recover anything it.