(optionally) stop if no commands received recently.
shift to Park, when appropriate
distinguish device failures before and after initialization
deprecate old CarCommand message interface