FileManager posixPermissions effective mode across Apple SDK and Foundation on Linux
Goal: create directories and files with restrictive POSIX permissions using Foundation FileManager so other local users cannot read them by default. The effective mode depends on both FileAttributeKey.posixPermissions and the process umask at creation time. FileProtectionKey adds runtime data protection on Apple platforms, but availability differs across mac