Turns out that this was interference from seLinux in the management template: after asking for help regarding apparently related issues with qvm-copyet al., @DVM helped me out here and that solution also resolved this problem with file transfer by salt. @marmarek et al.: the fact, that file transfer involving the standard fedora-39 template is seLinux-prohibited probably counts as a bug?