Comment by dwaite

encrypted by both a boot password and a secure enclave held key