overrides:
   ceph-deploy:
      dmcrypt: yes