I mean - my original plan was to ditch the disk-encryption + ephemeral disk, and that worked fine. Now I want them. So I tried converting the damned thing to a managed disk, and couldn't figure out how to get that to fly either (managed disk was fine - creating the scaleset with it was not). Almost wondering if I need to go via gallery or something like that..