model: add a saveonshutdown flag