Filter xattrs when creating filesystem from OCI image #212
Description
#209 introduces xattrs filters. Right now we filter out every xattr other than security.selinux, which sometimes causes issues like #211 (comment)
We should have the same xattr filter everywhere we create a filesystem