add disk encryption step