Correct, that's the general idea. Just make sure to replace "rpool/encrypted" with the actual name of your encrypted ZFS dataset, and modify the mountpoint path as needed.