Looks like a good idea, however I'd like to keep the comment block in place, since it adresses more than just user creation. Can you maybe add the comment to the system-user package instead? Or keep it in tpm2-0-tss and move it to the new "Requires(pre): User(tss)" line.