I also don't know if it's safe to call shutdown() in a thread pool thread. If it is not, we should make these methods return an error if the process is shutting down, and the caller can call shutdown().