truecrypt: convert PKCS to resource