GetOwnerOfSecretFile, report the name of the file in the error message.
Delegate security of the content to the substituter.
OptimisePath should not share files with different ownership.