move shutdown server perm check to restart only