Function place 

pub fn place(files: &[SecretFile]) -> String

Each kept secret written at its path, its folder made when missing. The file is created empty and limited to SYSTEM and Administrators before the value is written into it, so it never holds the value with its folder’s (wider) access list.