Instead of twice in a row asserting that it's "running" (which might both succeed even before it's switched to not running), then...

can we somehow detect that it really has restarted (e.g. it's a different pid, or some activity of monit that is publicly visible)?