Should we have one "sys-usb" per USB Controller?

related thread: Proposed procedure for using untrusted USB drives

This thread is related if you decide to buy a seperate USB card: