pub(crate) fn read_private_account_id_file(path: &Path) -> Result<u64>Expand description
Read an account id without placing the value in process argv.
On Unix the opened descriptor itself is checked after O_NOFOLLOW: it must
be an owner-only (0600) regular file owned by the effective user, with a
single hard link. This ordering avoids a path stat/open TOCTOU window.
Other platforms fail closed because this exact owner/mode/no-follow contract
has no portable std equivalent.