Make /run/keys a ramfs so it can't be swapped out

Signed-off-by: Shea Levy <shea@shealevy.com>