make link.sh more sane
move all root stuff into 'root'

todo: apparently git doesn't deref symlinks, so iptables needs to be
      re-added
simplify link.sh