Debian-gdm ALL = NOPASSWD: /sbin/cryptsetup
