ZFS crypt key is on a LUKS partition, so simply use LUKS as normal.