Currently all yml merging takes place in `/tmp`, but it would be nice to allow this to be set. Another option would be to create the merged yml files with 600 permissions.