I didn’t understand how a user that cannot unlock FileVault helps. Can you please elaborate on this setup? Thanks.