You are hitting the error when the Exchange policy requires encryption, even without Exchange if you go into Settings > Loc and Security > Encrypt phone you'll get the same error.
A guess from the clueless...could this be an issue that the encryption should be happening in the kernel and our leaked SBF can't update the kernel?