@gsuberland When you deploy the system, you didn't know that the switch controlled that receptacle.
The receptacle has to be controlled by a relay somewhere, and that relay has to be independent of the switch (unless you want to lock yourself into a fixed "this switch - that relay" scenario that eliminates most of the benefits of smarts).
The only sane choice is for the relay to be normally closed so the receptacle doesn't go permanently-off on failure. Which means the failure mode *has* to be always-on.