An independent "arm" switch is a reasonable solution. I'd want to be able to bring the crew back if they were incapacitated, sick, etc. Or even just bring the shuttle back so what went wrong can be determined.