I almost feel like encryption systems like this need physical keys. They can be secured in safe, maybe create 2 even.
While its not always possible, it's a good idea to use at least two completely different backup methods, avoiding single points of failure like in this case. For example, use a logical volume manager to make frozen copies of your filesystems, and back those up using something low level.