Feanil/full temp path

@nedbat Figured out why the test wasn't working. We needed one more level of indirection.  When the jailed code creates temp directories with mkdtemp.