atime is being updated by attic, even if the file is owned by current euid and the OS supports os.NO_ATIME.

atime is also updated if attic runs as root, although root has always permissions for NO_ATIME mode.