In such a setup the org.netatalk.metadata xattr is used by vfs_fruit (and possibly Netatalk) as internal storage for Mac metadata. It should not be exposed to clients, so vfs_fruit should probably implement vfs_[f]listxattr to filter this xattr.