How to encrypt and store files in IPFS such that only certain people can unencrypt and see the file?

Question

I am setting up a platform whereby data is stored on IPFS and then give access to some (or in some cases all) through a front-end UI.

Storing on IPFS is straight forward