minor improvement to `shutdown-on-error` docs