I want to ask somehow offtopic question:
what do you guys think about security of cgd atop cgd configuration?
I store my sensitive data this way:
configure 3des-cbc cgd0, then configure aes-cbc cgd1 atop cgd0d.
Of course, I place no disklabel on cgd0 because in that case one get
only 1 bit security more..