You may also want to allow OPERATOR to do a SHUTDOWN for such things as shutdown execs (if you have one) to cleanly close things out prior to actual 'CP SHUTDOWN'.