Extend toaster to support a workflow that will be conducive to enabling security checking and things like adding a root password and possibly adding users.  Also have a way to run some static check on the rootfs before the image is created to ensure it's passing some set of security checks (such as buck-security).