# create a KEK
# create and get wrapped the two keys used in AES-XTS (key2 is used in input processing, key1 in the bulk enc/dec
# mark the linkage between each key in both directions
# check state and links
# finished - deactivate
# cleanup with destroy
# KEK deactivate
# KEK destroy