only allow manipulation of runtime settings via xattrs. closes #22
getxattr for user.mergerfs.{base,full}path returns the source paths. closes #23