kmod: conditionalize kmod setup on CAP_SYS_MODULE, not whether we run in a container

It's generally preferrable to conditionalize on the actual ability to do
something then the context we run in.
machine-id-setup: allow passing NULL as function argument, for simplicity
core: populate unit file set with preset data if we boot with empty /etc
update TODO