Make package tarballs be in their own directory

This makes it harder to tarbomb a directory by accident.

Fixes #191.