common/encrypt: Create an encrypted equivalent of _scratch_mkfs_sized