system: Allow separated /boot and encrypted root.