As suggested in the forums (initially hinted by Ian, then explicitly suggested by Carlos) it would be good to provide a "shutdown" option on the Confconsole "usage" screen.
The way it is now, a user needs to log in to shutdown which seems pretty dumb in retrospect!