disable disk encryption by default