pub fn create_file_beneath(root: &Path, relative: &Path) -> Result<File>
Create a new private file beneath a trusted root and return its bound handle. Existing paths are never opened or replaced.