Document security considerations regarding AEM media

[andrewdavidwong]

The usual advice is to install AEM on a USB drive. However, others have experimented with installing AEM to a internal disk partition and even to an optical disc. There are also many different types of USB devices:

• Kanguru USB flash drives with physical write protection switches, which are particularly desirable for storing AEM (+ /boot).
• Yubikey
• USB armory, which is actually an entire computer in a USB stick form factor; this may allow for even more possibilities, such as encrypting the entire AEM stick.

Related thread: https://groups.google.com/d/topic/qubes-users/I5clx1E-S9M/discussion