Move containers to standalone file
Force remount everything read-only before running kexec -e
Try to have /system mounted as read-only on secondary ROMs
Disable 50selinuxrelabel, breaks SELinux contexts if used with MultiROM