shutdown protocol asserted with tests, some fixups for log messages / exceptions
return value paranoia for schedule_provision_group