Ah, so you mean things like incus exec from an administrator could operate on an encrypted VM? (Maybe not that, but similar things, I guess.)
Yeah, that makes sense.
I guess the encryption of the image preparation could be automated in whatever image preparation tools you want to use. And hopefully at some point there would be an incus verify that could give some certainty.
However, that’s the input I needed- I will shelve this for now, thanks!