Would be trivial to block new connections first, and kill existing ones a while later.