Now there is a separate SHUTDOWN message that relies only on being received by the broker thread, the main thread can be hung horribly and the process will still eventually receive a SIGTERM.