boot.zfs.forceImportAll = false;
boot.zfs.forceImportRoot = false;
-boot.zfs.enableUnstable = true;
-boot.zfs.requestEncryptionCredentials = true;
+boot.zfs.enableUnstable = false;
+# Can be overrided with a list of specific datasets
+boot.zfs.requestEncryptionCredentials = lib.mkDefault true;
# Enables periodic scrubbing of ZFS pools.
services.zfs.autoScrub.enable = true;