device: add nm_device_get_unmanaged_mask()