Update and replace

hi guys, it seems ceramic can handle what i need but i want confirmation. I’m building a NFT platform, that nft will be crypted and when user transfer the nft i have to update the crypted file with the new pk of the new user. In first time i was uploaded the crypted file on ipfs but for security reason after transfer the old file was always accessible by the old user. After i found ipns name but it’s easily reversed and user can get the ipfs cid and after transfer have access to the old file too.
Now i found Ceramic and “Evolutionary files”. But how it works ? with my security issue, my users don’t have to find the ipfs cid because after transfer they can access it. We can do this easily with Ceramic ? or i’m wrong ?