vfs: use finstall_refed in openat
This avoids 2 atomic ops in the common case: 1 to grab an extra reference and 1 to release it.