Protect against clobbering user-writable files