When setting
client_body_in_file_only on;
nginx is supposed to cache the user request body to a file and NOT delete it, this is convenient for debugging.
However with modsec on I realized that the file gets deleted even when set to ON.