HTTP Authenticated '/shutdown' endpoint.

Review: https://reviews.apache.org/r/22832