Whatever you do, prior to the moment you encrypt the first partition, have in place a policy for cryptographic rotation and key retention. The last thing you need is to have one of your key persons leave for greener pastures leaving behind all their data and none of their keys.
In order to be effective the policy for key storage must be one that there is no exception to, period, nada. Changes yes. Exception no. Then figure out a secure way to retain the keys the prohibits rouge usage.
Finally figure out how you will go about a full key change. What happens if Joe leaves in a less than polite manor (he got his butt canned for cause) and this individual may have copies of the keys. How do you rotate, what gets rotated first etc. Cover your butt when it comes to data destruction as well. The more effort you put into planning, the more likely you are to keep all of your data usable.