Firefox gets closed-source DRM

Well, does vfat support xattr? How do you even set labels on such a thing? As for ext* keys, the only ones I've used hold my ssh keys, so it doesn't get shared… Maybe there should be a mount option for SELinux to treat as "untrusted" (e.g., I set noexec on all keys for sanity's sake)