add check to auto turn on GRUB_ENABLE_CRYPTODISK if /boot/grub2 is on an encrypted partition