Since there are two processes with possibly different credentials, track
the ability to kill them at the vsm_set granularity. When a restart is
established, stop assuming the ability to send signals to the process.

If a live VSM advertises a process that yields something other than
ESRCH, assuming that the PID is not recycled too soon, we can conclude
that EPERM is as good as a successful kill.