If you don't want it to boot change it to no_reset but you still have to make sure the first boot whenever you choose to do it is reliable and stable until encryption is complete. Assuming you have an auto-reset circuit and are not just manually strapping it into download mode.