OK Challenge for you all

I would like run out patches to managed devices that are not logged in. Sometimes these devices do not get powered up for long periods. I can WOL a managed device with an assigned bundle which then runs a shutdown action but only if I login. I know I could set up a scripted login but this could cause a security issue. It would appear the directive bundle with an action to reboot/shutdown will only work if a user is authenticated.

Is there a sneekyer way?