Major Description
In restart, the "max-total-failures" parameter is expected to be greater than or equal to zero. If it's less than zero, then restart will immediately fail, because the total number of failures (0) is greater than the max allowable threshold.
It should check its parameter, and notify the user if they specify an invalid value.