By old files, that can mean any snapshot schedule you choose to set up (daily, weekly, monthly, quarterly ...).
Not sure if rsync can do local encryption these days? So I guess 'for the paranoid' (as Tarsnap's tagline is), Tarsnap with write-only keys might be better.