Since 5.1.3, we no longer drop capabilities as root, thus the
tmpfiles no longer need to be owned by root.