fix(c10n): always quote $USER_DATA
fix(c10n): head the tmpfile rather than piping $USER_DATA