I'm attempting a computer refresh scenario with the USMT hardlink option. I've been asked to have the USMT store encrypted. As far as I can tell USMT can't encrypt a hardlink'd store. I'm considering using EFS to do the encryption after the loadstate has completed. Are there any other methods that I can use for encryption of the store?