# <target>      <source device>         <key file>      <options>
root-unlocked UUID=%root_uuid% none luks,discard