you should use one of the functions that produces a temporary name for you. This is generally a PITA, but you can't assume that someone doesn't have their entire life savings held in BTC in /tmp/whatever. I mean, they would be an idiot, but still.