This is why I enabled encryption with the fdesetup command manually so the GUI can't "have a bug" that backs it up to iCloud/keychain anyway.
https://developer.apple.com/library/mac/documentation/Darwin...
edit: you want to ensure you don't use the -keychain option, and then you want to write down the recovery key it prints out and store that somewhere safe.
This is why I enabled encryption with the fdesetup command manually so the GUI can't "have a bug" that backs it up to iCloud/keychain anyway.
https://developer.apple.com/library/mac/documentation/Darwin...
edit: you want to ensure you don't use the -keychain option, and then you want to write down the recovery key it prints out and store that somewhere safe.