fscrypt: require that fscrypt_encrypt_symlink() already has key