Oh, I just found a limitation - unable to use UEFI and GPT so you can't encrypt the system drive/partition
Only people using MBR Disks can encrypt the system drive/partition.