Found from https://jira.mongodb.org/browse/BF-44727, if a CMK rotation is in progress when a shutdown happens, the CMK rotation will get a failure, then force the node to crash.  It needs to check what the error is, and if the error indicates there's a shutdown already in progress, don't initiate a node crash.