# <target name> <source device>          <key file>      <options>
root            /dev/mapper/vg-root      none            luks
swap            /dev/mapper/vg-swap      /dev/random     swap,cipher=aes-xts-plain64:sha256
vservers        /dev/mapper/vg-vservers  none            luks