Dm-crypt with LUKS/Swap encryption