Use mkstemp instead of tmpfile

[thommey]

Using tmpfile() can potentially be insecure as per http://cwe.mitre.org/data/definitions/377.html, mkstemp with previously set umask(0600) would be appropriate. Code changes can be small with fdopen() on the resulting file descriptor, or we can adjust the copying functions.