pub(crate) fn keep_private(path: &Path)
What the body’s files hold is yours alone: on Unix, readable by you only (0600), whatever the system’s default for new files.