DynamicUser=yes implies ProtectSystem=yes, so let's explicitly make sure the coverage directory is writable in these tests.