[CentOS] LUKS layer / best practice