Kali Linux Live USB Persistence Encryption Configuration

Kali Linux supports a persistence partition to retain system changes and data across reboots. By default, the persistence setup scripts target a partition labeled 'persistence' formatted as ext4, which lacks native encryption.

To secure sensitive data on a portable drive, LUKS encryption must be implemented manually. This introduces a trade-off between security and boot-time usability, as the live system must map the LUKS container before the persistence partition can be mounted.

Given the current behavior of the official live images, what is the recommended method for integrating LUKS encryption while ensuring the persistence scripts still recognize the partition? Does the system support an automated passphrase injection, or is a manual prompt required at every boot?