Remove a macOS user's from ability to decrypt FileVault disk

WARNING: don’t do this unless it’s for a secondary user on your Mac. This will prevent any user from decrypting your FileVault, which means if you do this with the only user on your Mac, you just lost all of your data.

sudo fdesetup remove -user username