Do safe writes

[JeffAbrahamson]

When writing the root or leaves, I should write to a new file and then rename into place (rather than overwriting). It's still not atomic (the root and leaf don't update at the same time), but would avoid risk of corruption on program termination during write.