The working directory `install` is running in is already a private sandbox that's deleted on `return` so the `mktemp` is unnecessary here.