Make the chaos type pluggable

Shutting down an instance is just one way an instance can fail.

This patch makes it pluggable, so that we can simulate more failure types.