Purpose of encryption key, possibility to generate on the devie/at build

[Thaodan]

With the recent changes it's impossible to specify
the encryption key without editing the sources.
This is quite bad as editing the sources makes the built not reproduceable anymore and saving a encryption in public is of course also not an option.