switch to using filenames generated using mkstemp()
    Kerberos may be unlinking the file before using it, resulting in a race
    condition, but I can't really do anything about that just now