Failed to save data for plugin storage under antivirus solution

Hello, i'm running fluentd (`1.10.2`) using td-agent (`3.7.1`) on Windows 2016

My FluentD config looks like:
```

flush_interval 1s
host xxx
port 12345
protocol udp
@type gelf

@type record_transformer

message ${record[description]}

channels application,system,security
@id windows_eventlog

persistent true
@type local

tag windows_eventlog
@type windows_eventlog

root_dir C:/opt/td-agent

```

And i'm seeing the following errors coming through on the logging stream:
```
[windows_eventlog] failed to save data for plugin storage to file path="C:/opt/td-agent/worker0/windows_eventlog/storage.json" tmp="C:/opt/td-agent/worker0/windows_eventlog/storage.json.tmp" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/opt/td-agent/worker0/windows_eventlog/storage.json.tmp, C:/opt/td-agent/worker0/windows_eventlog/storage.json)"
```

I checked and can see that this directory does exist and the file `C:/opt/td-agent/worker0/windows_eventlog/storage.json` is created and has the following contents:
```
{"application":[541177,41519],"system":[648,54300],"security":[8973443,1]}
```

Any ideas why i might be getting a `permission denied` error? It appears that the service is running as System:

Not sure what else to check, any thoughts?

Start by reproducing the failure with the supplied Fluentd configuration on Windows and inspect the antivirus, service-account, and storage-path conditions around the reported rename error. Done means identifying the cause of the permission denial and recording a verified resolution or a narrowly scoped plugin change.

Written by the indexing model from the issue text.