CVE-2013-4476: lib-util: split out file_save_mode() from file_save()