=item B<--key> SELECTOR

Specify a key for LUKS, to automatically open a LUKS device when using
the inspection.

=over 4

=item B<--key> NAMEB<:key:>KEY_STRING

=item B<--key> UUIDB<:key:>KEY_STRING

=item B<--key> B<all:key:>KEY_STRING

C<NAME> is the libguestfs device name (eg. C</dev/sda1>).  C<UUID> is
the device UUID.  C<all> means try the key against any encrypted
device.

Use the specified C<KEY_STRING> as passphrase.

=item B<--key> NAMEB<:file:>FILENAME

=item B<--key> UUIDB<:file:>FILENAME

=item B<--key> B<all:file:>FILENAME

Read the passphrase from F<FILENAME>.

=item B<--key> NAMEB<:clevis>

=item B<--key> UUIDB<:clevis>

=item B<--key> B<all:clevis>

Attempt passphrase-less unlocking for the device with Clevis, over the
network.  Please refer to L<guestfs(3)/ENCRYPTED DISKS> for more
information on network-bound disk encryption (NBDE).

Note that if any such option is present on the command line, QEMU user
networking will be automatically enabled for the libguestfs appliance.

=back
