note that LMDE doesn't support full disk encryption #336