tmpfiles: apply chown, chmod for 'Z' entries too

      If changing ownership or permissions is not desired, they can be
configured to '-' or omitted entirely.