verify_signed_buffer: prefer close_tempfile() to close()