One more wrinkle -- if I remove the Bert service's dependency on the jetty9 web service, any Exception thrown from `start` (even without the `shutdown-on-error` wrapper) would cause the  JVM process to abort on its own.  So the declaring jetty as a dependency -- even if the service doesn't additionally register a handler with it -- would seem to necessitate that any downstream services would need to use `shutdown-on-error` to have their uncaught exceptions abort the JVM process (allowing whatever jetty is holding on to to be killed)?