clean shutdown on SIGTERM

Currently on sending SIGTERM I get

```
FATA[0011] serve failure                                 address="/run/containerd/containerd.sock" error="accept unix /run/containerd/containerd.sock: use of closed network connection" module="containerd/grpc"
```

Expect a clean shutdown, as discussed on Slack.