Function atomic_write_private 

pub async fn atomic_write_private(path: &Path, contents: &[u8]) -> Result<()>

Durably writes a private file with owner-only permissions on Unix.

The temporary file receives the restrictive mode before any content is written, so plaintext never has a wider visibility window before rename.