Previously we would be using `> file` (shell redirect),
but this is suspectible to race conditions
when starting multiple containers writing that file.

Using `sponge` allows us to soak up all input,
and atomic replace existing file.

This reverts commit 1f1ba794.