as an alternative: virecover currently does the right thing if it is run unprivileged. adding a default .profile thing to execute it will achieve the same functionality without requiring any root privileges. additionally we will want to move recover dir to somewhere user-controlled.