@StopNode.  Also, I think a better message is "@StopNode will not proceed because doing so would cause the cluster to crash."  This is a lot less esoteric than 'violate k-safety'"