Protect against clobbering user-writable files in Emacs