Use tmp directory for stashing a copy of bundled cacert.pem