So a trip-switch for the server?

How would one access it if one needed to do config changes or, really, anything the server for legitimate purposes?

ssh in and shut down first (and/or just use a properly reliable filesystem).

Mail transfer can tolerate multi-hour interruptions. Imagine the drama if it couldn't!