Put that data in a separate drive then, all the rest should be encrypted by default.