Secure Boot jetson nano basic questions

i’m new to the secure boot procedures in the nvidia jetson nano.

i fused the security fuses using:

sudo ./odmfuse.sh -c PKC -i 0x21 -k ../emi_pkc.pem jetson-nano-emm

and i sucessefuly flashed the image with:

sudo ./flash.sh BOARDID=3448 FAB=200 BOARDSKU=0002 -x 0x21 -y PKC -u …/emi_pkc.pem jetson-nano-emmc mmcblk0p1

now at runtime how can i check that the i’m using the secure boot?

i saw that the fuse: pkc_disable is 0x00000001, shouldn’t be 0x00000000?

how can i set FUSE_PKC_DISABLE to 0 with odmfuse?

other question is if i burn with pkc key the filesystem gets encrypted?