tmpfiles: adjust excludes for the new per-service private dirs

In d8c9d3a (systemd: use unit name in PrivateTmp directories)
I forgot to update the tmpfiles config.