If you have the right diffusion models and prompts for comfyui, all you need to encrypt are the prompts. Make sure comfy generates into a tmpfs mounted folder so nothing hits the drive. Diffusion is deterministic.