Here is another way to look at it more visually. The root dataset “tank” is unencrypted, while the pseudo-roots are encrypted. Each color represents an “encryptionroot”, which you can think of as an “encryption family” that all use the same user keys and are unlocked and locked together.