vfs: add NOFOLLOW flag to umount(2)