fscrypt: introduce fscrypt_needs_contents_encryption()