[opensuse-security] Encrypting the root filesystem algorithm questions