bundle disk image - encrypted