Destroy all keyslots before zeroing luks header

On selfdestruct, first destroy all active keyslots through the
cryptsetup library, before zeroing the luks header.

Also take a factor two safety margin when zeroing the luks header,
and halt the machine (instead of rebooting) after selfdestruct.