It seems to me the problem here is with the security policy, not with OpenAFS. What does the policy say exactly? No network traffic during shutdown, or that the traffic is being generated in the wrong context?