{{A checkpoint pickup that needs to decrypt a KEK will abort the node if shutdown cancels the
KMIP retry ladder mid-pickup. The node crashes instead of shutting down cleanly.}}