afs: do not allow two shutdown sequences in parallel