enable full disk encryption with Luks2
