select which FSes to encrypt during install?