Upon further experimentation, Tails is apparently out for the security solution. It does not seem to be able to save subsequently installed applications to the persistent file. Saves network configuration, as well as some other settings, but just no applications. That is not adequate for my client’s purposes.
Now investigating Zorin boot thumb drive option.
