Rationale: the systemd-userdbd.service is socket-activated and, while both service and socket can be masked, some have no need of this component whatsoever. I would sooner compile it out across my fleet.