pub fn write_private_atomic(path: &Path, body: &[u8]) -> Result<()>
0600 temp file + rename (reload-state), as [write_atomic].
write_atomic