during initial boot g-i-s should start over an unlocked shell
this likely needs some interaction with the shell we could
- starting phosh initally with
-U
, - the user should then be able to set up a pin via gis
- and the phone will then boot up locked in the future
does this make sense?