Comment by cookiengineer

There's always LUKS to cover this scenario: Nuke Keys that get activated with a second password. [1]

[1] https://github.com/roema/cryptsetup-nuke