Fix: scheduler: disallow on-fail=stop for stop operations

because it would loop infinitely as long as the stop continued to fail