User with admin or operator pribvileges can shutdown server even if this operation is restricted.
vulners.com/securityvulns/securityvulns:doc:6218