Allows changing the .onfail action away from "panic" -- valid values at
the time of this commit are "continue", "panic", "reboot", and "retry".

I couldn't figure out how to inject a different .onfail mode out of the
existing options without needing to rebuild a kernel, so this may just
be a misguided change.