Function write_private 

pub fn write_private(path: &Path, content: &str) -> Result<()>

Write content to path atomically (temp file + rename) with mode 0600. A crash mid-write leaves the previous file intact, never a truncated one.