Certain post-upgrade fixups are not possible to run from the old image. T866 is a good demonstration.
We need support for post-upgrade scripts run from the upgraded image. I suppose running it from the vyatta-router script if /config/upgraded file exists is sensible.