Removing LUKS encryption from a root device in-place