[watermelon0]

There is a link to the blog post about how to enable disk encryption after installation.

The only issue with that is that the boot chain is not verified, and you are not protected against evil maid attack.