proper FDE (inc. swap) on linux turns hibernation into a cryptographic lock.