XNIO-235. use doPrivileged() block to shut down executor