Don't hide it in the packaging as that makes it easier to miss. This makes debian/ really only carry packaging information.
Use a separate group for users that should be able to access the LED devices.