Right, which may be enough as long as all we are trying to accomplish is a clean shutdown of the whole system, not restarting all or part of it while retaining state and partial results from running jobs.  TaskManager's messages won't go anywhere but the /deadLetters synthetic actor, but I think that's fine as long as we avoid throwing uncaught exceptions etc. while trying to shutdown.