Probably better just to use a veracrypt hidden volume, and preferably not a SSD.