[petera]

Its a much more secure approach than using full disk encrpytion, no need to have non-public-keys on an exposed system.