iirc, bazel keys all of its on-disk stuff off of $TMPDIR or we