Draft: make xattr name used by VFS acl_xattr configurable

Usecase: containers. This is needed to avoid running containers in priveleged mode when using the VFS module.