fix for encrypted boot