autorestart on failure can probably make the system unshutdownable for ever
 https://gitlab.com/mikhailnov/system-autoupdate/issues/3