write via temp file

avoids short reads, and also if a backup program came along while the write
was happening, avoids short backups

1 files changed, 1 insertions, 0 deletions

diff --git a/keysafe.hs b/keysafe.hs
index 02dc18a..94846f0 100644
--- a/keysafe.hs
+++ b/keysafe.hs
@@ -45,6 +45,7 @@ retrievedemo = do
 	let l = drop 1 $ zip [1..] (getIdents sis)
 	shards <- map (\(RetrieveSuccess s) -> s)
 		<$> mapM (uncurry (retrieveShard localFiles)) l
+	_ <- obscureShards localFiles
 	let esk = combineShards tunables shards
 	kek <- genKeyEncryptionKey tunables name password
 	-- TODO: need to solve the encryption puzzle