Software data-at-rest encryption
 Nested Fault Domains (FDs) for two-layer protection of stretched clusters, across sites and locally
 New operational management enhancements (Enable health checks on ESX independent from VC, Monitoring networking stats & resync traffic, and more)