Based on the video tutorial, I've made config file for cryptmount. To bad that I'm on 5.55, but should be ok. :( Key can be dumped by OrbisMAN. In theory partition should be mounted read only, but without kernel flag set for rw, UFS2 it always be mounted with ro, even if in config is set rw...