add warning about hard-coded LUKS passphrase