AFAIK if we want disk encryption status we're going to have to use the private framework, unless folks have other ideas besides what's discussed in https://github.com/facebook/osquery/issues/3709