For the records:Up to and including systemd 250.3 (testing), the service worked (with libnss-systemd installed). After upgrade to systemd 250.4, yet another failure mechanism seems to have popped up:
"DynamicUser is denied access to dbus-daemon after a recent lockup bugfix" https://github.com/systemd/systemd/issues/22737 End result: systemd[1]: Failed to start Refresh fwupd metadata and update motd. Regards, Klaus