Towards shutdownable agents via stochastic choice