is it possible to get and use the root hash for a `btrfs` subvolume? it seems like this could be a good substitute for `dm-verity` for integrity protected read-only snapshots.