enforce scp because we don't have the default sftp on the jailhost
make room for bootstrap1
create the crypto zpool during bootstrap1 phase
provide convenience targets for bootstrapping and mounting the crypto volume