I think this goes in the wrong way. There isn't really any point in filtering at all if we have access to the whole device by the file persmissions, and we generally should not allow any access for partitions.
I think we need to simplify the selection, not add crazy amounts of special case code.
