ref #454, an `xbd` hook which uses `shred` to wipe a file prior to deleting it , speficially for deployments where this is safe (CMR, non-CoW fs)
