add cryptfs.h header for build recovery