manage tmp dir outside of git, better file restriction on credentials