fn private_dir(folder: &Path) -> Result<(), String>
The private folder made, yours alone (0700 on Unix), before its lock is taken there.