mount(8) will mount an unclean root fs, so if we get into a
mount issue after having run fsck twice first time in the loop
the next iteration will fix the system, but may not mark it clean.

Avoid that by always invoking fsck twice, for better or worse.

Further proof that all of the system should use the plugin system,
as the dependencies are going to be unmanageable in the long run.
As soon as there is a new base service with its own include file
its definition will be missing.

create qrcode in the browser instead of an external service

While there zap a note that is obvious, because there is no button
and a text label saying what facility uses the cert...

The call stack is pretty loose on is_fqdn() as it is called by
system_routing_configure() which gets called in an uncontrollable
fashion in interface.inc.

This needs to be ported to the python backend table, because
this code requires nmap to be installed...

Instead of injecting dynamic gateways after reading the config, we will
inject them before instead.  This gives us the opportinuity to check
for matches and remove disabled gateways, finally addressing #933 in a
sane way.

Suggested by: @fabianfrz