Use file stream for save/restore.

This allows the state machine to get the underlying FileChannel
in case it wants to call force() explicitly to amortize the cost
of fdatasync.