backup.sh: tarsnap-based backups