no longer require full disk encryption but its still recommended