Fix trip up on first run

If splunk has only just been installed, the first command is `status`, not `start`, because it has to run the `not_if` to determine if `start` should be run at all.

I saw this with splunkforwarder 5.0.3. It may or may not have been present in earlier versions.