Add -x parameter for extracting the contents of the crouton bundle.
Use wrapped, randomly-generated passphrases for encryption.

Breaks the old method of encryption; use an old version of crouton if you need
to migrate your data.

This is far more secure, and you can store your keys separately from the chroot
if you so desire, for maximum security (within the capabilities of this system).