Client 0.16.10, install update

Canonical installed binary name is now auroravault. The installer creates a vault symlink if no existing vault command is present; if one exists, it is left alone. auroravault update performs a self-update for binary installs. Restore paths now write plaintext files atomically with mode 0600 from the first byte.