This change is useful mainly in FIPS mode, where we cannot extract volume key directly from libcryptsetup.