Robustify functional tests

`machinectl poweroff XXX` is documented as a graceful shutdown, but it is anything but. `systemctl -M XXX poweroff` is graceful, giving fleet time to purge its state before pulling the plug.