m4: store encryption keys in the "extra" partition

Change-Id: I5194af508b3255a868b9ecc9fe9edcc0ace8dd83