Doesn't systemd do that already (via machinectl, e.g.)?