Setting extended attributes failed, reason: Operation not permitted

How so, aren’t all the keys just a clear text string?
The value can be random binary crap, but we shouldn’t really need to parse that, just copy the value provided by the user.

I don’t think that allowing an entire namespace is going to be all that useful as I certainly wouldn’t want to allow all of trusted or all of security but some specific keys within those I may be fine with.