add patch migrate-into-vfs-crypto-engine