Control: tag -1 fixed-upstream
If I understand [1] correctly, there is an easily backportable fix for this, namely editing the service file to remove /etc from InnaccessiblePaths At least in my test that seems to work on the buster version as well. [1]: https://debug-me.branchable.com/news/version_1.20200820/
