Have you thought about the Encrypting File System?

Even the Administrator couldn't read that person's files.

Before you think this is "the solution", remember that if someone forgets to backup credentials or forgets their password, the files are never to be accessed again.

Bob