Add external device-mounting scripts.

Separate root encryption scripts from external device encryption
scripts, update 'README', and add 'TODO' file.