How to encrypt (and decrypt) your Azure VM disks after deployment