Before rotating the encryption passphrase on an encrypted data volume (/dev/sdb1) that uses LUKS, a security engineer wants to create a backup of the LUKS header so the volume can be recovered if the header becomes corrupted during the operation. Which command safely produces this backup?