use TMPDIR
implement the source validator wrapper ourselves