The issue is that all these bits and pieces are wonderful for developers, and to a lesser extent sysadmins, but not so wonderful for users, who still get to int

The issue is that all these bits and pieces are wonderful for developers, and to a lesser extent sysadmins, but not so wonderful for users, who still get to interact with their systems using much the same paradigm as when the first desktop operating systems came out. The closest I can find would be Sandstorm, which ends up being a frankenstein mashup of Linux and a capability system.