our archives are zip bombs so extract into new directory