updated prefs

Profile Manifest/com.twocanoes.xcreds.plist

@@ -409,6 +409,56 @@ A profile can consist of payloads with different version numbers. For example, c
 			<false/>
 		</dict>
 
+		<dict>
+			<key>pfm_name</key>
+			<string>EnableFDE</string>
+			<key>pfm_type</key>
+			<string>boolean</string>
+			<key>pfm_title</key>
+			<string>Enable Full Disk Encryption (FDE)</string>
+			<key>pfm_description</key>
+			<string>Enabled FDE enabled at first login on APFS disks.</string>
+			<key>pfm_default</key>
+			<false/>
+		</dict>
+		<dict>
+			<key>pfm_name</key>
+			<string>EnableFDERecoveryKey</string>
+			<key>pfm_type</key>
+			<string>boolean</string>
+			<key>pfm_title</key>
+			<string>Save PRK</string>
+			<key>pfm_description</key>
+			<string>Save the Personal Recovery Key (PRK) to disk for the MDM Escrow Service to collect</string>
+			<key>pfm_default</key>
+			<false/>
+		</dict>
+		<dict>
+			<key>pfm_name</key>
+			<string>EnableFDERecoveryKeyPath</string>
+			<key>pfm_type</key>
+			<string>string</string>
+			<key>pfm_title</key>
+			<string>FDE Recovery Key Path</string>
+			<key>pfm_description</key>
+			<string>Specify a custom path for the recovery key</string>
+			<key>pfm_default</key>
+			<string></string>
+		</dict>
+		<dict>
+			<key>pfm_name</key>
+			<string>EnableFDERekey</string>
+			<key>pfm_type</key>
+			<string>boolean</string>
+			<key>pfm_title</key>
+			<string>Enable FDE Rekey</string>
+			<key>pfm_description</key>
+			<string>Rotate the Personal Recovery Key (PRK)</string>
+			<key>pfm_default</key>
+			<false/>
+		</dict>
+
+
 		<dict>
 			<key>pfm_name</key>
 			<string>shouldShowAboutMenu</string>