Flush the broker's ioservice when catching sigterm

We should shut down gracefully on both SIGINT and SIGTERM.   (SIGKILL is ungraceful; we have no control over that anyway.)