v261
firstboot: allow configuring machine tags via firstboot
libcrypt-util: turn into dlopen() dependency