add simple playbook to encrypt disk via cryptsetup