reboot-strategy=off breaks subsequent reboot strategies

Setting `reboot-strategy=off` causes the `locksmithd.service` file to be masked. cloudinit currently does not unmask, so any subsequent invocation with an alternative reboot strategy (e.g. `reboot-strategy=reboot`) will fail.