file flags, only system ones. Restrict those to the superuser. Before the behavior was controlled by EXT2FS_SYSTEM_FLAGS. Make that behavior the default.