fold in patch from Jim Paris for use of mkstemps to improve security