Cope with unexpected sub-system shutdown

In some circumstances, the entire OnCue actor subsystem will terminate (e.g. components cannot be initialised).  In this case, the service should terminate, so that external monitoring tools can take action.