Yes, *without* nametemplate my filename also is /tmp/mutt-woodstock-1000-11933-1206042331875854250 which is multisession- and multiuser-safe, and not predictable. But that secure name generation seems bypassed when using nametemplate, reducing %s to just 'mutt'.