https://nixos.wiki/wiki/Full_Disk_Encryption