cgroup-util: don't expect cg_mask_from_string()'s return value to be initialized

Also, when we fail, don't clobber the return value.

This brings the call more in-line with our usual coding style, and
removes surprises.

None of the callers seemed to care about this behaviour.