cosmetic
rm tempfile before we use it, to avoid attack via symlink