Systemd sysext

I need help with systemd-sysext/confext. I created the files and placed them to thei respective folder. when I run the commands directly (systemd-confext refresh), the overlay is created and the files appear. but when I enable the systemd units I notice that the folders have to be emtpy, otherwise the unit does not get started. Just to test, I removed the offending line (ConditionDirectoryNotEmpty=…) and then the overlay gets created during boot. but now i have several units that fail ( chronyd.service, firewalld.service, systemd-nsresourced.service, systemd-userdbd.service, systemd-nsresourced.socket, systemd-userdbd.socket). I also tried to set the selinux context according to my actuall system using chcon --reference but the context is not applied in the vm after applying the overlay. is there something that I am doing wrong? Feels like it after doing all those hacks.