See #101.
People might set $TMPDIR and this doesn't buy us much.
Since we don't write the applications we use, this is liable to break pretty easily for new/older versions than tested on. The other protections should be sufficient.
Closes #39, #40.