Function private_temp_dir 

pub fn private_temp_dir() -> Result<PathBuf>

Return (creating if needed) a 0700 per-user scratch directory under the app data dir. Callers write transient sensitive files here instead of the shared system temp dir.