I have an 8040 currently running CM 9.1P1. All disks are SED but currently in protection-mode open mode. Is there a method to convert the existing disks/aggregates to protection-mode full?

Is enabling encryption on spare disks and preforming a disk replace 1 or 2 disks at a time a viable option? That sounds time consuming but I don't have 100TB of swing space.