This branch belongs to the larger effort of keyfile improvements with loading profiles from /usr, /run, and /etc.
The code is not yet actually used, but I propose it as patch for early merging, to keep the remaining work smaller.
This adds support to read and write special symlinks to indicate that a particular profile is hidden or loaded. See the commit messages for details.