/System/Library/CoreServices/APFSUserAgent The APFSUserAgent watches for IOKit notifications about new APFS containers appearing, and about volume hash mismatch. If APFSUserAgent finds a new container with an encrypted volume, it will pop up a DiskUnlock dialog to ask the user for volume unlock password.