SECURITY HARDENING & PORTABILITY
Preserve the central idea of the Pars Enterprise procedure while making the implementation less dependent on /dev/sda, explicit about UUIDs, and suitable for both BIOS and UEFI environments. The original procedure itself uses the same PEOSG/LUKS/LVM/ZFS/filesystem/token sequence.
