Changing persistent-encryption to accept a list TYPE... instead.

Changing persistent-encryption to accept a list TYPE... instead.

The comma-separated list TYPE... specifies which types of encryption
to allow for persistent media, and whether to allow plaintext media.
The possible TYPEs are the old {none, luks}, with default "none". The
only change is that this allow plaintext and encrypted media to be
used simultaneously.