use a temporary file & rename on output, avoid truncating ssh_config if error