Overlay to a tmp dir, then move into place [fixes #70]

This prevents an incomplete or interrupted overlay from leaving an
invalid install lying around.