optionally disable kexec for crypto-setups