d %t/lock/geodata           00755 root root

# for `geodata-download --lockdir` *and* `geodata-import --lockdir-sources`
# (hence the set-group-ID bit and g+w)
d %t/lock/geodata/cache     02775 _geodata-download _geodata

# for `geodata-import --lockfile`
f %t/lock/geodata/lock      00644 _geodata _geodata