I have a Server 2016 box with all drives encrypted, with a USB key inserted during boot so that it auto-unlocks itself. I have secondary drives that are also encrypted with the recovery file saved on ...