diff --git a/Cargo.lock b/Cargo.lock
index 77b71285..c2fee897 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -943,9 +943,9 @@ dependencies = [
 
 [[package]]
 name = "casbin"
-version = "2.19.0"
+version = "2.20.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4b12705127ab9fcf4fbc22a0c93f441514fe7bd7a7248ce443e4bf531c54b7ee"
+checksum = "c53f7476c2d0d9cd7ccc88c16ffc5c7889a0497b3462b10b12b5329adde69665"
 dependencies = [
  "async-trait",
  "fixedbitset",
@@ -1121,7 +1121,7 @@ version = "3.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "faf9468729b8cbcea668e36183cb69d317348c2e08e994829fb56ebfdfbaac34"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.48.0",
 ]
 
 [[package]]
@@ -1839,7 +1839,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
  "libc",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -2811,7 +2811,7 @@ checksum = "3640c1c38b8e4e43584d8df18be5fc6b0aa314ce6ebf51b53313d4306cca8e46"
 dependencies = [
  "hermit-abi 0.5.2",
  "libc",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -3171,7 +3171,7 @@ version = "0.50.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -4390,7 +4390,7 @@ dependencies = [
  "errno",
  "libc",
  "linux-raw-sys 0.11.0",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -5398,7 +5398,7 @@ dependencies = [
  "getrandom 0.3.4",
  "once_cell",
  "rustix 1.1.3",
- "windows-sys 0.61.2",
+ "windows-sys 0.52.0",
 ]
 
 [[package]]
@@ -5429,7 +5429,7 @@ version = "1.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d8c27177b12a6399ffc08b98f76f7c9a1f4fe9fc967c784c5a071fa8d93cf7e1"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -6131,7 +6131,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.48.0",
 ]
 
 [[package]]
diff --git a/install.sh b/install.sh
old mode 100755
new mode 100644
index 6f0b486a..feb322b4
--- a/install.sh
+++ b/install.sh
@@ -79,7 +79,8 @@ download_and_install() {
     need curl
     need tar
 
-    tmpdir=$(mktemp -d)
+    # Use $HOME-based temp dir so Snap-sandboxed curl can write to it
+    tmpdir=$(mktemp -d "${HOME}/.stacker-install.XXXXXX")
     trap 'rm -rf "$tmpdir"' EXIT
 
     curl -fsSL "$url" -o "${tmpdir}/${archive_name}" \
diff --git a/scripts/install.sh b/scripts/install.sh
old mode 100755
new mode 100644
index 6f0b486a..feb322b4
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -79,7 +79,8 @@ download_and_install() {
     need curl
     need tar
 
-    tmpdir=$(mktemp -d)
+    # Use $HOME-based temp dir so Snap-sandboxed curl can write to it
+    tmpdir=$(mktemp -d "${HOME}/.stacker-install.XXXXXX")
     trap 'rm -rf "$tmpdir"' EXIT
 
     curl -fsSL "$url" -o "${tmpdir}/${archive_name}" \