zfs: add encryption docs