bsc#1224149 and this has the same root cause: the snapper plugin make calls to sdbootutil, that also calls bootclt and pcr-oracle / pcrlock. By itself (sdbootutil) also will remove and create certain files in the ESP, /etc, and /var.