pub fn tighten_dir_perms(path: &Path)
Best-effort tighten audit log directory permissions to 0700 on Unix.
Already stricter permissions are preserved; Windows and other platforms are no-ops.