trusted.overlay.opaque=x support?

[cyphar]

It's not really clear what this is supposed to do (the docs imply that it marks the directory as a whiteout directory, but in practice such directories act like regular directories but with trusted.overlay.whiteout-tagged files not showing up in readdir).

Needs more investigation.