guard against non-writable history file