...
/persist/img to move to /persist/vault/img
Some of /persist/config to move to /persist/vault/config (only a selected subset of config which is treated as sensitive)
Also, /dev/sda9 will move to EXT4 from EXT3, to take advantage of EXT4 native file system encryption.
...