CE-2903: Stop IOC if it restarts too many times in a short window
This change requires procServ 2.8.0 to use the --oneshot
option.
This allows systemd to be the utility that manages restarts of an
IOC instead of procServ (and systemd as well!), and furthermore
will stop an IOC from restarting over and over in perpetuity,
which will allow for better IOC health monitoring.