btrbk will be next \^*^/ Also: - detect the root filesystem in play with `ansible_mounts` instead of specifying it manually. - dnscrypt: hardcode some privacy settings