autoscaler.go

Since VMs take a while to shut down due to their lame-duck period, we
want to stop considering them available as soon as we send the
shutdown command, so we maintain an internal list of "tombstones" used
to filter the list of available hosts.