write-hd-image-squash: fix su setuid, both in image creation and on rootfs
  * use pseudo definition for bin/su's mode
  * do not use /tmp for creating images as that has restrictions to setuid
install-service: use --force from packages
haveged: force service install, svc exit on prereqs