improved tmpfs fstab config
improve encryption playbook and make encrypted folder public
sftponly has only sftp access to the encrypted storage
beautify baikal deployment
i think it might be a good idea to make this clear