pub fn write_empty(path: &Path) -> Result<()>
Creates a valid, empty key file (deploy mounts require the file to exist).
Fails on I/O errors; refuses to touch an existing file.