Correct. If you ssh into a host, you need to be in a group with elevated privileges like whee, use sudo, or the root user to shutdown or reboot the system. I ssh'd into the same system with the same username and password with the F32 VM that I started up and both shutdown and reboot commands were restricted.

[jfargen@jwhlaptop ~]$ ssh jfargen@192.168.122.5
The authenticity of host '192.168.122.5 (192.168.122.5)' can't be established.
ECDSA key fingerprint is SHA256:0940gk+TUrJhXF+Qu5q/FltdyARooEKy9M64oqi/zOE.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '192.168.122.5' (ECDSA) to the list of known hosts.
jfargen@192.168.122.5's password:
Web console: https://localhost:9090/ or https://192.168.122.5:9090/

Last login: Sun Nov  8 14:37:31 2020
[jfargen@localhost ~]$ shutdown -r now
Failed to set wall message, ignoring: Interactive authentication required.
Failed to reboot system via logind: Interactive authentication required.
Failed to open initctl fifo: Permission denied
Failed to talk to init daemon.
[jfargen@localhost ~]$ reboot
Failed to set wall message, ignoring: Interactive authentication required.
Failed to reboot system via logind: Interactive authentication required.
Failed to open initctl fifo: Permission denied
Failed to talk to init daemon.
[jfargen@localhost ~]$

Regards,

-Jamie