I noticed a little bug in the ACL will cause gradm to enter DL state, thus requiring a hard reboot.
role_transitions admin web
role web uG
subject /usr/local/apache2/bin/httpd loh
blah blah blah
I narrowed it down to this, if you have special user roles, and do not have their default shell as decribed in /etc/passwd, it will cause gradm to enter DL, and locking you out of gradm/grsecurity acl.