[05]

And set up readonly rootfs. Or use a Banana Pi with onboard NAND to store rootfs. Or do both, just to be sure.