Yeah it would be nice to use Go's native tar support so we can avoid the temp file as well. Just stream it using the `io.Writer` interface would be cleaner IMHO.