What's the problem with using sparse images (.dmg files)?
Those suit your needs, when you need the files mount it and it should ask for the password, when you are done, unmount.