don't shell out to mktemp