Since /run/keys is a ramfs, it is not paged out and a good place to copy secrets to. Test whether secrets with a path in /run/keys exist after initrd.
lz4 compression is excluded because it doesn't work for a reason which remains unclear to me.