Ceph Charm Network Encryption

How can I add network encryption to a Ceph deployment? I have seen how to add encryption at rest but I am concerned about the network because we can never assume the network is secure.