add script to generate encrypted homedirs