Changed SIGKILL to SIGTERM in command executor shutdown.

If command executor processes doesn't respond to SIGTERM during
shutdown, the slave will call containerizer->destroy() after
EXECUTOR_SHUTDOWN_GRACE_PERIOD seconds. MesosContainerizer::destroy()
calls SIGKILL on the process tree which effectively is the necessary
signal escalation.

Review: https://reviews.apache.org/r/18604