On modern system e.g. render nodes are made accessible via the udev
uaccess functionality, which adds the logged in user to the ACL of the
device. This means just checking for user and group is bound to give
false positives. Instead use os.access as a first check
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>