The DMU layer will determine which objects in be encrypted when being placed in a dataset that has the encryption property turned on.
http://opensolaris.org/os/project/zfs-crypto/phase1/dmu_ot/ Which of these marked as FALSE can be and should be *TRUE* ? -- Darren J Moffat