ensure that the internal code_update URL is hit *precisely* to reduce the risk of improperly configured servers and sloppy expressjs routing letting just anyone reboot a server.  bug #699171