The generated files (UKIs...) can potentially be huge, hence create them in /var/tmp/, rather than /tmp/.