making the s3 fetch and verify step also use the private tmp dir that gets cleaned up