always call inode_change_ok early in ->setattr