Maybe we should deny requests while recovering after a shutdown