Only reconnect once if connection fails -- we only want to catch exotic errors, not cover up hardware/infra failure

Explicitly disconnect when not being able to send_hello, as technically we may not have disconnected.

Go back to ON state if we reconnect, stop reconnecting when shutting down, wait 5 seconds max in INIT to connect and go to FAULT if not