Development record

A status move (abcd capture resolve, and the other moves between status folders) writes the record at its new path with the atomic writer's default mode 0644, not the mode the record had, so a record kept 0600 in the embargo store comes out readable by group and other, and every embargo sub-verb then refuses the store until the person runs chmod 600 on it. The store's folder is required to be 0700, so no other account can reach the file; the cost is the refusal and the manual step.