no need for crypto-loop device