This allows to build a crypted rootfs and sets up crypttab accordingly.
No assumption is made about how the rootfs is unlocked.