25.04.2.6: Getting started with apps. Can I use encryption on hostpath dataset?

My situation and plan:

I am using TrueNAS Scale/CE 25.04.2.6 and want to get started with using Apps. In addition to my regular pool “elephant” I have created a new pool “lion” with a mirrored vdev using 2 Micron 960GB 2.5" SATA SSDs to store the App data, using the hostpath method.

The first app I want to setup is Plex. Right now I’m running a Plex instance in a Windows 11 Pro VM on a different machine. That Plex instance uses has a database that has lots of manual editing, so - after I get the Plex app working on my TrueNAS system, I am planning to move the Plex database over. The reason I am not just moving the VM over is that eventually I want to get a GPU (e.g. Intel ARC A310) to do hardware transcoding and I would hope that using an App container avoids any potential problems with GPU pass through.

My questions:

  1. I am planning to create a parent dataset (e.g. “AppData”), under which I will create the hostpath datasets for the individual apps (e.g. PlexData) e.g. to perform some setup common for all apps.
    I would like to encrypt this parent dataset with a passphrase and unlock it manually upon bootup of the system.

Obviously the apps won’t be able to start properly, while that parent dataset is not yet unlocked upon system start. But will the apps start, once their hostpath datasets get unlocked or do I have to start them manually? Or - worst case - will they not work at all, if their hostpath dataset isn’t available initially?

  1. Should I stay with the default recordsize of 128kB on the AppData dataset or is there some benefit to be had to increase it? (FWIW I did set it to 1MB on my HDD pool, but I’m not sure, if there are different considerations for SSDs)

Thanks in advance for any insights.