On coordinators use cluster auth for /_admin/shutdown.
Export cluster auth on dispatchers (non-cluster) to JS.
Use cluster auth for shutdown.