It took a heck of a lot longer than I thought it would, but the #x220 now has its boot, root and swap on a 32GB mSATA SSD and home on a 500GB spinning platter drive. Both devices are encrypted, but I only have to type one passphrase on boot because there's a keyfile for the spinner drive stored in /root.