encrypted-keys: add ecryptfs format support