You should look into trying to create a persistence.conf for a Kicksecure USB, this might get you more towards what you want. It should work but I would like to get some others take on it.
Since it is debian based technically it should work I would think and has been an idea I would like to try.
Here is a guide from Kali linux but still applies:
Manpage for persistence.conf
https://manpages.debian.org/testing/live-boot-doc/persistence.conf.5.en.html