Create a safe_open context manager that replaces the default open

[geotom]

This context manager should write to a temporary file and only if this works without an error, then we can replace the target file by the temporary file. This way we can assure we do never leave corrupted files.