[norswap]

I assumed that tails is normally invisible and must be logged into using some secret handshake at boot time. Otherwise it's pretty silly, even if the partition is wholly encrypted.