There should be a command like `halo fence --host <host_id>` that the admin can use to proactively fence a host.