separate graceful from forceful shutdown