Coverity defects: should check return codes of mkdir and chown; guard against passing nullptr to Py_DECREF.