Getting Mac to ask for disk encryption password

Solution 1:

The proper tool to add or remove FileVault users is fdesetup.

Open Terminal and enter sudo fdesetup list -extended to get a synopsis.

To remove a user by UUID or user name use:

sudo fdesetup remove -uuid <UUID>
sudo fdesetup remove -user <username>

All users removed won't be able to log-in with their passwords at the first password prompt because they aren't listed anymore. The user still exists as OS user though. To login as such a user either has to use fast user switching or log out as FileVault enabled user and log in with the non-FileVault-enabled user.

To reenable FileVault disabled users either use sudo fdesetup add -usertoadd <username> or open System Preferences > Security > FileVault > hit the "Enable Users..." button and enable a listed user.