Make qemu_shutdown_requested signal-safe