grml2hd currently supports encrypted swap and /home partitions, but not
encrypted root-partitions ('/').
as i understand, this is possible though and 'only' not done because simply no
one wrote the code.
here's a vote to implement this for the next release.