Encryption by default doesn’t require disabling undelete.