https://osism.tech/docs/guides/deploy-guide/bootstrap mentions this command:
osism apply reboot -l 'all:!manager' -e ireallymeanit=yes
In a running production system, running this would be highly disruptive. In my opinion safe guards like "ireallymeanit=yes" should always be typed by the user to create awareness and not copy and pasted, especially without warning on the site. There is a small but present risk of actually running this by accident.