As a followup to my earlier question, are there plans for a geli aware boot0 so /boot does not need to be unencrypted? I know that this functionality can be done with TrueCrypt with FreeBSD running inside a TrueCrypt system, but having it part of FreeBSD would be great!