@f2dbd6cd TPM encryption makes me so paranoid.  What if something happens that causes it to reset?  Upgrading the processor or motherboard.  Most people don't use an external module -- not all boards even support one.  I feel like it should only be used for volatiles.  I guess it's not as fast, but in the end, doesn't something more universal like Veracrypt just make more sense for stuff like whole disk encryption?