new fai-helpers: apply-httproot and slim-down-nfsroot