the payload now extracts into either /tmp/tarinstall or $XDG_CACHE_HOME/tarinstall in order to avoid conflicts