persists to temp file one disk, than swap over, to minimize file locking