but no ioctl is available ;
 * src/css.c: initialize p_disc_key in the case when key decryption fails.