match ghosted lock file modes to tmpfiles configuration
seem to have been messed up in a previous merge