VFS/Security: Rework inode_getsecurity and callers to return resulting buffer