1. Proposed title of this feature request
HCP KubeVirt Nodepool support for rootdisk encryption and automatic (vTPM) unlock

2. What is the nature and description of the request?
The Hosted Control Planes (with KubeVirt provider) do not provide an option to enable (LUKS) rootdisk encryption on the KubeVirt VirtualMachines, which is possible on a "classic" installation [1]. Automatic encryption unlock during boot (with vTPM) [2] is also required.

 [1] https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/installation_configuration/index#installation-special-config-storage_installing-customizing 
 [2] https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/virtualization/managing-vms#virt-adding-vtpm-to-vm_virt-using-vtpm-devices 

3. Why does the customer need this? (List the business requirements here)
Compliance requirements for rootdisk encryption on virtual machines

4. List any affected packages or components.

• HCP Nodepool CR or HostedCluster CR