External command to stop VMs
condor_off before invoking shutdown
Re-insert VMs in HTCondor queues if shutdown fails
Only one attempt when shutting down VMs
Better production timeouts