os.tmpnam is unsafe.