add an API to check cryptsetup version

[rchincha]

var CryptsetupTooOld = errors.Errorf("libcryptsetup not new enough, need >= 2.3.0")
^ expose this so callers can figure this out early rather than right at invoke time.