'shutdown-on-error' catches Throwable