Comment # 42 on bug 1000625 from Stefan Dirsch

Franck, I do not understand at all how this hack works. If you try to explain
to me what it does and why this works I may consider adding it permanently to
the NVIDIA packages.

Seems that only the user, which is currently logged in into the session has
access to /dev/nvidia* files. ACL listings to the device files via getfacl
confirms that.

Reading tmpfiles.d manual page didn't explain the magic to me. :-(

And if this an undocumented feature of tmpfiles.d I'm wondering, whether it may
be removed at some point silently, so we're in trouble again ...