cjdns: limit /tmp access to cjdns_pipe_*