Redmine#5986: fix to assume all non-specified return codes are failed

see https://dev.cfengine.com/issues/5987

**When any of `kept/repaired/failed_returncodes` are specified**, any unspecified return codes are set to repaired.  This is the only way to preserve sanity, since in Unix convention there are far more error codes than success (which has only 0).