hmm, it's a great lkm but it doesn't do wonders

but seriously, i don't think it it would fix the add-stuff-to-a-cd problem, imho it's more useful for safely allowing users to add devicedrivers and generally give more permissions, as well as easilier giving services a chroot-ed jail (security security security!). Could be wrong, have yet to dive in and exploit all its goodness