adding draft of full disk encryption [no ci]