treecompose: Add --check passwd/groups, needs latest rpm-ostree
treecompose: Don't traceback if rpm-ostree command fails