Heads up for folks...
There's a thread on Twitter (look for @patrickwardle) about encrypted APFS volumes created via Disk Utility in High Sierra having their password stored as the password hint. It does not happen if you use diskutil to create the encrypted volume.
