[FLOC-727] Design sketch of restart-policy handling.

https://clusterhq.atlassian.net/browse/FLOC-727
(It's possible I imagined the extra `on-failure` configuration.  It's probably equally possible it's not documented and you have to read the implementation to learn about it.)