Enforce shutdown invariant