crypttabOptions: luks,keyscript=/bin/cat
efiMountOptions: umask=0077