cryptsetup: copy value, not key for (rd.)luks.key