recipes: Add a recipe for masking a systemd service.