## create drive, do it as user that is has proper rights, no need to chown that
cd ~/Documents
dd if=/dev/zero bs=1M count=128 > encrypted_drive.img
/usr/sbin/cryptsetup -y luksFormat encrypted_drive.img

## this as root while doing initial setup in user's ~username/Documents
/usr/sbin/cryptsetup luksOpen encrypted_drive.img mySecrets
mkfs.ext4 -v /dev/mapper/mySecrets
/usr/sbin/cryptsetup luksClose mySecrets