tmpfs for the download directory, great idea (that I have seen above too) !

At work I have all documentation put on a sshfs in the meantime that the team agree on a documentation tool for all (zillion of stuff deployed and still using the good'ol system).

And SSHFS lets you mount a directory only accessible to the user.

It is fun to see 'access denied' when you are root. :)

That introduces to distributed systems where authentication is omnipresent.