[ceph-users] luks / disk encryption best practice