Use new kill_() for _temp_error()

instead of stop(). We really want to require a reset and no chance to set a new temperature.