High-level question: Does the whole keyslot manager concept even make sense for the fallback? With the work-queue we have item that exectutes at a time per cpu. So just allocatea per-cpu crypto_skcipher for each encryption mode and there should never be a slot limitation. Or do I miss something?