more robustly random temp file names