Currently, installers offers full disk encryption or allows user to configure
it by themselves. My idea is to add unencrypted storage to save up space. In
unencrypted storage will be stored only non-private data, like programs
executable, programs data, etc. But.... Each of file in unencrypted data should
been signed or system deny to load it. Even program data could have fingerprint
and open* functions family could been altered to return -1 and set errno, when
file do not have correct fingerprint.

Why? To reduce disk usage.