docs: document encryption options for qcow, qcow2 and luks