+entry
encrypted_root_on_a_remote_vds: added a minor threat-model disclaimer