A shame the features don't indicate it can encrypt at rest.