I meant "just use dm-verity" as in "don't do full disk encryption"...