block: add a separate operation type for secure erase