I love the layered thing except for the rough edges. Unfortunately the rough edges for me are that Linux containerization and permissions are completely idiotic.

In Fedora Atomic it should be foolishly easy to set up a system account, with access to specific USB devices via group, and attach a volume that can easily be written to by a non-root user inside of the container.