LUKS1 encrypted root and smartcards