Stop and await all database users before closing. Failed native cleanup must never appear successful on retry.