Verify shutdown invoked only once

This is the default, no?