use the simplest possible orderly shutdown of the executor service

This neglects the potential that there are interruptible tasks in the
executor that won't exit unless interrupted, but it does address the
immediate need identified in LOGBACK-849; namely, ensuring that the
executor service is shut down when the context is stopped.