firstboot script params should not be expanded until run on device