How about if a webpage was made on the server that would require user authentication and would execute a suid shutdown CGI script?