use cache dir for temporary files to avoid ACL issues