Previously encrypted volumes need to reference the encryption secret in the PV spec. This PR extends the user guide. Related issue: #922
