IMA/EVM support for PAX xattrs (patch included)