Replace minimal mount flags (dir_cache=no) with aggressive caching and connection tuning: kernel_cache, attr/entry/negative timeouts, fast cipher (aes128-gcm), reconnect with keepalive.
