tmpfiles: yes but no
    it really needs to be able to manage and relabel device nodes