This eliminates some overhead, because the compiler doesn't need to
consider these functions throwing.

Prepare to add more modes.

Fixes yet another breakage of creating the database+state file on
Windows.

The file handle is never reset to INVALID_HANDLE_VALUE, and thus the
destructor will assume the operation shall be cancelled and will
delete the temporary file.

This was a major breakage for saving the database file and the state
file.

The Linux feature allows writing new files to an invisible file, and
then replace the old file.  This preserves the old file if we get
interrupted by some event.

Support operating systems that don't have O_CLOEXEC.