I meant only for named disks and VM templates.
Deep re-encrypt on VMs will be supported in GA release as a Day-2 operation given the VM is powered off.
Sorry for ambiguity in my previous answer.
