be more resilient on pilot shutdown