pub fn private_dir(path: &Path) -> Result<()>
Create a private product directory; never chmod HOME or an existing XDG parent. Existing product directories with unsafe ownership/permissions are rejected.