another banger from qualys https://cdn2.qualys.com/advisory/2026/03/17/snap-confine-systemd-tmpfiles.txt