On selfdestruct, first destroy all active keyslots through the
cryptsetup library, before zeroing the luks header.

Also take a factor two safety margin when zeroing the luks header,
and halt the machine (instead of rebooting) after selfdestruct.

When deleting an encryption key, check if there is at least one other
active keyslot, and do not delete if there isn't.

Replace the very similar encryption_keys_post and encryption_keys_put
callback functions by a single handler function, with a boolean flag to
separate the two variants.

basic PUT and DELETE behavior, still does some weird stuff with random unicode characters appearing some times