do not place tests in predictable temp folders

- using predictable names in /tmp for doing anything is bad for security
- trying to re-execute tests after one failed atempt may result in weird behaviour instead of working (or failing the very same way) tests

thus replace all hardcoded `/tmp` paths with calls to `mktemp -d`