initramfs readable by root only