luks for iso

ideally luks should be an option for the iso. This is not currently provisioned in nixos, but work has been done for this: https://github.com/adrianparvino/NixOSEncryptedLiveCD

ideally try to merge these changes into canonical nixpkgs