1. A method for providing resource content use comprising: requesting a resource at a computing system, wherein the resource is associated with an application layer abstraction in an application; intercepting the request for the resource using a mediator at an application layer; determining, using the mediator, if the resource is trusted or untrusted to enable application layer semantics for the application layer abstraction; if the resource is determined to be trusted, accessing the resource in a first derived user account (DUA); and if the resource is determined to be untrusted, create a protected DUA, accessing the resource in the protected DUA, redirect the intercepted request to the protected DUA, wherein the protected DUA provides unrestricted access to the resource, and wherein the protected DUA and the first DUA are both associated with a same user and are dynamically invoked based on the resource within a same integrated user environment of the same user to enable an integrated execution environment for both trusted and untrusted resources.