We discussed this in person. Our long-term solution is to have a "safe mode". We'll implement that after merging the current code with master.

An important point that this brings up, however, is that on the _client_ side, when a shutdown happens, the client should tell node that. I've added a TODO to the client code to address this.