[shutdown] make init shutdown two-phase so msgq is stopped after all others.

otherwise, some final messages (most notably unsubscription from groups)
could cause disruption due to EPIPE.
Merge pull request #22 from bundy-dns/shutdown

[shutdown] make init shutdown two-phase so msgq is stopped after all others