bkernel: mock+nspawn pesign config cleanup
    
    It is better to keep the Mock's default for `nspawn_args`, and just
    append to them (mock can change that configuration option dynamically).
    
    Complements: b6669bc5f619344f212977f1e534316ffcd48245