Sorry I got confused - in your method, what is dk3 needed for?
What I suggested then, was a daemon that waits for a disk device to
appear, then it can probe the disk and configure the appropriate dk(4)
device. If it determines that the device is your USB stick then it
configures as dk3. Otherwise, just put it as eg dk7. The admin knows that
/dev/dk3 is normal and can arrange permissions accordingly so that you can
access it, but dk7 can be restricted (thats for the paranoid admin)
Then, I'm not sure why /dev/uuid/* and /dev/label/* would be necessary?
(sure, they would be 'nice' to have)
iain