opendkim: properly create tmpdir; use DNSSEC