Thanks to /etc/pam.d/shutdown any local user can just do "shutdown now" to
As a local user
System goes to run level 1 here.
Normal behavior. Disable the pam_console access
(see ''man pam_console'') if you want to change it.