To safeguard a ZFS boot environment against unwanted removal, is it enough to place a hold on a snapshot? (Are ZFS BEs always snapshot-based?)
