LUKS2 validation code now requires reencrypt keyslot together with online-reencryption flag or none of those.