fs: add LSM-supporting anon-inode interface