Is your feature request related to a problem? Please describe.
I would want to enable Bitlocker during SetupComplete but the current code sets it specifically to XTS256

Describe the solution you'd like
Ideally we would be able to configure the encryption or leave the default of XTS128

Describe alternatives you've considered
Letting Bitlocker be enabled after user login. However this slows down the process and makes the device be in grace period right after Autopilot.