I've been getting a bit annoyed that I need to keep creating a
/usr/pkgsrc/distfiles directory on machine without pkgsrc just to provide
a location for download-vulnerability-list to put it's list.  I know
I can change that by setting PKGVULNDIR, but it seems like a poor default.

	How about if we change that to /var/db or /var/tmp?
(or even ${PREFIX}/var/db, if there's an easy way for a script to know
 where it happens to get installed into)

eric