graceful shutdown on sigkill