fn create_file(file: &Path) -> Result<File>
open asked for 0600, and only if nothing is there: create_new is what makes truncating an existing file impossible here.
open
0600
create_new