Feature request: support masking services in live session

Some services like tlp are unnecessary and cause issues in live sessions. It would be useful to be able to mask them in live overlay. Normal symlink in the live overlay directory does not work, it breaks the service enablement function in buildiso