tmpfiles: remove unnecessary function
tmpfiles: if /var is mounted from tmpfs, we should adjust its access mode
tmpfiles: add ability to mask access mode by pre-existing access mode on files/directories

This way it makes a lot more sense to specify an access mode for "Z"
lines.
tmpfiles: don't apply sgid and executable bit to journal files, only the directories they are contained in
update TODO