http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion/wiki/Encrypted_Images
There was an attempt to do that, but this effort has stalled. cryptsetup-reencrypt could be used, allowing for the shipping of encrypted Kicksecure images. The master key and the password (potentially blank) would be known to the public at first. Later on, cryptsetup-reencrypt would be used to fix the master key and password, that is, to make the encryption effective.