# <target> <source device> <key file> <options> root-unlocked UUID=%root_uuid% none luks,discard