Specify encryptable volumes to avoid clobbering the root