Don't bring service to 0 when not all rollback instances are unhealthy

[rdbatch]

When rolling back after what looks like a failed deployment, Herman should let instances that rolled back successfully to stay alive in the event that the rollback fails due to cluster instance specific issues. As it stands today, a rollback that only partially fails will have the service desiredCount set to 0, causing an outage instead of degraded service.