verify_signed_buffer: use tempfile object