multiple layers of encryption with LUKS, all automated