[fsflover]

You description reminded me of Salt Stack [0] on Qubes OS. I'm no expert and may be mistaken that it's relevant, but did you consider it?

[0] https://www.qubes-os.org/doc/salt/