While reading a PR, I notice the codebase is inconsistent in how it handles errors reading a file. Sometimes we early return:

std::string contents;
  if (!forensicReadFile(filename, contents).ok()) {
    TLOG << "couldn't read sudoers file: " << filename;
    return;
  }

Other times we nest the if:

if (forensicReadFile(history_file, history_content).ok()) {
...
}

I think the early return is more common. But I wanted to poll folk here for idiom