update from Reuben Thomas: fixes a bug in mkdir (failed to tag, so newly created dir was not visible in the filtered fs), and makes error reporting a little better (if tag routine returns an error, that is propagated).