first round at encrypting a new raid