utf8: when escaping unprintable unichars, escape the whole unichar, not just the first byte of it
utf8: minor simplifications
units: skip mounting /dev/hugepages if we don't have CAP_SYS_ADMIN

Preparation for allowing systemd to run gracefully in containers lacking
CAP_SYS_ADMIN.