Enable encrypted backing devices in fileystem configurations

Example configuration can be viewed at: https://github.com/edwtjo/nixcfgs/blob/master/tempest.nix

This could possibly need some more polish, like deciding on what encryption modules to use and autofill the filesystem device since we know the label..