TODO: consider the implications of cryptsetup, lvm and dm