Check out my post on VMware Techzone detailing how to setup a zero touch USB key with OSDBuilder and an encrypted PPKG to fully provision a Windows 10 device.

https://techzone.vmware.com/blog/how-provision-windows-10-encrypted-ppkg