Function write_private 

pub fn write_private(path: &Path, data: &[u8]) -> Result<()>

Atomically write a secret file: parent dir 0700, file 0600 from the moment it is created, then renamed over path.