Comment 12 for bug 1857398

> I believe it would be rather trivial to have Ubiquity collect
> a password from the user, use "-O keylocation=prompt" and to
> expect the user to provide the password every reboot.

It is not appropriate to require the user to type a password on every boot by default; this must be opt-in.

The purpose of this change is to make it possible to defer the question of whether to encrypt, without requiring the user to reinstall. This is similar to what other operating systems do nowadays, and provided the performance penalty is reasonable, is still my recommendation.