The annoying wrapper script also wraps `systemd-cryptsetup`. We need to copy the original binary to $out too.