Root filesystem encryption patch set