zero-downtime restarts in go