Shutdown command; robust behavior after faulty checkpoint or dead VM afterwards.