Use a directory in the user's home instead of /tmp for storing sensitive data.