linux disk encryption with a USB "key"