New machine arrived; set it up on purpose with encryption, selecting to encrypt the system when initially installing, then also electing to encrypt my home directory; finally, setting up LUKS encryption on the big HDD following some online instructions (using defaults, basically, and then configuring in /etc/crypttab and /etc/fstab), before doing software installs and then beginning the overnight pull of all my data from Rutabaga. So far so good; we haven't yet tested ssh and other users to see who can access what when it's running.