pub fn write_private_atomic(path: &Path, body: &[u8]) -> Result<()>
0600 tmp + rename (reload-state).