Thanks for the feedback! That only leaves /tmp/xauth_*, which I already submitted - and that means I can close this bug as fixed :-)