diff --git a/_service b/_service
index fdc5dad..d44c021 100644
--- a/_service
+++ b/_service
@@ -1,4 +1,5 @@
 <services>
+  <!-- we need to setup a download_files service here. it is already called implicitly for some reason in the devel project, but not in e.g. SLE-15 -->
   <service name="tar_scm" mode="disabled">
     <param name="url">https://github.com/intel/tpm2-tss.git</param>
     <param name="scm">git</param>
diff --git a/tpm2-0-tss.changes b/tpm2-0-tss.changes
index b315efd..c295d9a 100644
--- a/tpm2-0-tss.changes
+++ b/tpm2-0-tss.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Jun 28 06:52:53 UTC 2021 - Marcus Meissner <meissner@suse.com>
+
+- small services fixes and comments
+
 -------------------------------------------------------------------
 Thu Jan 28 09:18:58 UTC 2021 - Matthias Gerstner <matthias.gerstner@suse.com>
 
diff --git a/tpm2-0-tss.spec b/tpm2-0-tss.spec
index 6ec6624..7b546f0 100644
--- a/tpm2-0-tss.spec
+++ b/tpm2-0-tss.spec
@@ -272,6 +272,10 @@ mv %{buildroot}%{_udevrulesdir}/tpm-udev.rules %{buildroot}%{_udevrulesdir}/%{ud
 # complains about "found conflict of libtss2-fapi1-3.0.1-lp152.103.1.x86_64
 # with libtss2-fapi1-3.0.1-lp152.103.1.x86_64". Thus leave it be for the
 # moment, some insane circle of errors is involved here.
+#
+# it seems the problem is that during `make install` the package runs
+# systemd-tmpfiles --create, and the directories are created outside the
+# package's install tree. It seems this is not expected by RPM.
 # %%ghost %%{_sharedstatedir}/%%{name}/system/keystore
 # %%ghost %%{_rundir}/%%{name}/eventlog