move finalizer outside of distro so device is unmounted so we can "dd" it for the s3 finalizer