`tempnam` already makes sure the file does not exist