Zorin was down unexpectedly today.  After some exploration I discovered systemctl was broken in such a way that a non-root user could halt the system.  For now I’ve taken public permissions off of systemctl.  I do not know that this is the only way a non-root user can halt the system.