modified: default setup - disabled full disk encryption