/usr/sbin/shutdown is in molly-guard 0.4.4-2.
This file is owned by root:root, with mode 0o777.
It is a symlink to /usr/sbin/../share/molly-guard/shutdown
/usr/sbin/../share/molly-guard/shutdown