Full-disk encryption joins the toolkit, MATE and Xfce stay while Gershwin sits this one out