Create new variable to control mounting of tmpfs

As there is every reason to think tmp will be noexec without root being read
only the options have been separated. Because of the need to clarify which is
which i've postfixed the existing option with _rootfs and added a _tmpfs
option.