How to create a persistent, LUKS encrypted USB device