using the -K switch for vnconfig is good if you're worried about offline
the performance hit is pretty unnoticeable unless you're doing lots of
reads and writes, e.g. a fileserver. on a decently fast machine you can
get 20-30 MBps read and write speed on an encrypted image which is
plenty for your /home in most cases.