lockdown: Only set SystemBUID in pair_record_generate() if it actually contains a value

This will prevent a crash in libplist when plist_new_string() will be called with
a NULL pointer.
diff --git a/src/lockdown.c b/src/lockdown.c
index 3e2fe06..c6efb16 100644
--- a/src/lockdown.c
+++ b/src/lockdown.c
@@ -743,7 +743,8 @@
 	}
 
 	/* set SystemBUID */
-	if (userpref_read_system_buid(&system_buid)) {
+	userpref_read_system_buid(&system_buid);
+	if (system_buid) {
 		plist_dict_set_item(*pair_record, USERPREF_SYSTEM_BUID_KEY, plist_new_string(system_buid));
 	}