updated rootaufs hook to support an encrypted persistent block device