misc:cherrypick bagyusz changes + misc othe changes

* use performance governor on boot
* update fstab with discard options
* first bits of encryption support
* use stock permissions for finger_threshold