pub fn write_binding_file(path: &Path, content: &str) -> Result<()>
Write a binding record: 0700 directory, 0600 file, atomic replace.