shutdown now passes state like startup, recover now deals with
force_deprovision properly. no tests yet.
ensure state is tracked, handled appropriately for both startup and
shutdown
protocol for shutdown. no tests yet.