Better reporting of permissions failures

[effigies]

In #1845 it was discovered that broad permissions failures end up with pretty opaque error messages.

To improve this, we'll need to track down cases where this currently happens and see if we can find some control-thread-accessible condition.

This might end up being a pretty deep rabbit hole, as most of the file writing is done by subprocesses, not the control thread.