A systemd service only fails (tmpfiles-recreated-runtime-dir-with-unexpected-group-ownership)

Manual restart works after an admin touches the directory, yet fresh boots recreate it with ownership the service user cannot use.