cryptsetup: tweak settings