use volatile swap encryption
make scripts executable