use tempfiles with read access for group and user

This way it will be readable by apache when we move it into sth. real.