A encrypted Stratis pool can bind a arbitrary Clevis configuration, like "tang", "tpm2", or "sss". Cockpit will initially not support all of them, very likely only "tang". But we should tell people if a pool has a unsupported clevis config and allow them to remove it.