disk encryption only enabled with a fused device. so that you’ll able to store the keys (i.e. ekb.key) securely.