Perhaps something like this work[1] could be useful to make it harder to shut down even if the list of nodes is public.

[1] http://sns.cs.princeton.edu/projects/cor/