use a temporary directory for logs and password files
make some more variables readonly