Restart crowdsec rather than reload; make nullok actually spare un-enrolled users