Each time I tell PuzzlePalace to decrypt a file, it puts a copy of the decrypted file into the /tmp directory, where it remains even after I logout. This is a pretty serious security hole. Suggestion to the author: each time you create a file in /tmp, you should unlink it immediately.