code review feedback: don't rely on /tmp/ existing

Auditors: benjy