Following the migration from our in-house sudo module to a
community-supported module, these docs needed some updates.

I actually needed this on my dev environment, which uses the
puppet/nftables module in Puppet...

wipefs will clear out the LUKS header very quickly which should render
the disk undecryptable, even with the master key. It's a good first
step that should work even on a running system.

This is basically ganeti, ipsec, iscsid, multipathd and timers, not
sure the latter actually works.

I had segfaults on nwipe on window resizes, hopefully that will help.