Encryption robustness

[bviktor]

• [ ] remote login using keypair
• [ ] login when offline / at home
• [ ] login after password change
• [x] ~in-place encryption~ not supported ATM
• [x] ~backup key stored in AD~ we use the local admin password instead
• [ ] Docker!

[bviktor]

We switched to LUKS so this is no longer an issue.