hardcode /bin/mktemp for reproducible builds, usrmerge’s fault