Were you able to get encryption to start? I came here to post the same
thing. In my case, even after adjusting the criteria to make these
systems fall into the unencrypted smart group and running our deployment
to enable FileVault the encryption proc...
