user. for xattr; crypto_headers now default_write_headers (in place for customer encryption key)