RKE2 - sample Secrets at Rest & Way to Implement SELINUX

I am using AWS environment with Rancher RKE2 (Kubernetes) version (close to latest - your choice of specific version). I want to confirm that RKE2 will support Secrets at Rest with a simple example to encrypt and retrieve that Secret and a way to incrementally implement SELINUX (assuming certain security problems with just implementing in full so will have to keep stepping back and forth for what level can be supported) in my environment with a simple iterative example.

Simple examples must be either importable to my AWS environment or easy to reproduce in my AWS environment for both and demonstrated there. Thank-you.