main: don't freeze PID 1 in containers, exit with non-zero instead

After all we have a nice way to propagate total failures, hence let's
use it.