Notable changes:
* set umask before `mkstemp`
* Add `allow_readonly` option (DANGEROUS!)
* Minor linter-level changes that probably don't matter