pub fn save_vault(vault: &Vault, key: &VaultKey) -> Result<()>
Encrypt and save the vault to disk with atomic rename.