I think that IT departments are going to disallow their users that kind of freedom unless they have more information/control about just which configs their user

I think that IT departments are going to disallow their users that kind of freedom unless they have more information/control about just which configs their users are allowed to boot to. It has to be more descriptive/composable than a pile of bits and a timestamp or they won't go for it at all. As much as I want to put all the power in the hands of the user, I'm sympathetic to the plight of the IT guy who has a team that always boots to "last known good" config thats several years old because they just don't trust updates in general.