Bacon: Misc partitions

bacon: Relocate disk encryption metadat
 * Due to an issue outside our control, we cannot put the crypto
   metadata in the userdata footer.
 * Move it to reserve4 and enable migration code.
bacon: Use less aggressive mount options
 * Reduce potential for FS corruption