common/encrypt: add helper functions that wrap new xfs_io commands