use make_tmpname to avoid finalizer races

garbage collection sucks