while working on #16660, I was unable to get a shutdown script to ever run. that's bad!

we should figure out why agents aren't runnning shutdown scripts and fix it.

when we do, we should move the make clean of the aforementioned pr into a shutdown script.