ensure filevault is enabled on all workstations