This is the Thule version of what you're thinking.  They do have a backing
plate and rubber seal.  The bolts do go through the top but are not visible
from the inside or outside normally as the canvas attaches above them.

http://my.tbaytel.net/guskers/vanpix_files/IMGA0090.JPG