The private index lived at a predictable /tmp path that std::fs::copy opened with create+truncate, following symlinks, and kept the source index mode. Create a fresh 0700 directory per capture instead (mkdir never follows a symlink and fails on an existing path) and remove it on every path.