Make the RHEL %%pesign macro a little better.

Use mktemp to avoid clobering anybody's local files, and document the
arguments better.

Signed-off-by: Peter Jones <pjones@redhat.com>