LUKS-encrypted SD card

It's meant to support an unencrypted card too, but I haven't tested.

Change-Id: I7d9e3cdbab011feabbac03aec8cde7f5467c6da9