well @terracatta 's second point there is a touch imprecise, or at least there's another public interface available if shelling out was an option, obvs - fdesetup