I think this xattr needs to live outside of the user.ceph.* namespace to avoid conflicting with attrs set from higher layers.  Like 'user.cephos.spill_out'.

Also, maybe just a single byte that is 0 or 1 to keep it simple?