The solution to this issue is detailed here:
Summary: The Debian tomcat9 package uses systemd sandboxing features and disallows writing to most directories by default.