Move the nat_dhcp jail to an unencrypted dataset so it can be available at boot.

ansible/roles/media/tasks/peruser.yaml

@@ -2,6 +2,7 @@
     name: per_user
 
 - name: Create directories
+  when: install_graphics
   file:
     name: "{{ account_homedir.stdout }}/{{ item }}"
     state: directory
@@ -12,6 +13,7 @@
     - ".config/mpv"
 
 - name: Copy files
+  when: install_graphics
   copy:
     src: "files/{{ item.src }}"
     dest: "{{ account_homedir.stdout }}/{{ item.dest }}"