In case the device is unencrypted, check whether encryption seems
possible (depending on filesystem usage and available memory), and
report that in the response.

Extend the `encryption/add` command to repartition the encrypted container,
copy the authorized_keys file to the configuration partition, generate a new
ssh host key for the dropbear running in the initrd, and reboot after it's
done.