Encryption support #60
Description
The kernel rework (#47) should provide us with everything necessary for metadata encryption, and as our platform has unused partitions for Knox DualDAR, we may repurpose one as the metadata partition.
If we can get encryption running, we should also rework our recovery trees to add full encryption support.