It should be legal to call shutdown() on a network interface without calling startup() (because an owning task executor will call shutdown() in its dtor).

Currently this crashes (because the NiTL doesn't keep track of whether it's started). Changing the _inShutdown atomic to a _state enum atomic can resolve that problem