Don't use ${CONF_PATH}.qubes, because it may override some existing file, and is racy approach (even if not against user, but another script instance). QubesOS/qubes-issues#1282