fail should cause shutdowngracefully