WIP: Add optional DEVICE_PATH argument to reform-setup-encrypted-nvme, which may target a disk image file (to be set up with losetup then) instead of an actual device.

@mntmn This what you had in mind?