Let users mount a private filesystem within their slices, if they need a filesystem...
drwxr-xr-x - root-context
drwxr-xr-x - slice-context