fn safe_remove_file(p: &Path) -> Result<()>