Hmm, I just found #cryptmount as a Linux package. Let's try this. Currently some keys are stored plain-text but at least on a #LUKS -encrypted /home/ RAID1 (yes, you can chain that) where the #GnuPG key is stored on an USB stick.