What's exactly the problem with sg being module? When you reload it the devices are recreated. So only race can be between an udev rule requiring the module and loading the module, right? Using sg_utils or gphoto2 by hand or from desktop will not race with loading the module at boot. Two different packages require the module loaded so the only logical place for sg.conf is udev or some dedicated package for modprobe rules.