signature & access control based overlay filesystem (supports for fuse, docker & hopefully kubernetes using CSI)