Could involve a dead man's switch (https://en.m.wikipedia.org/wiki/Dead_man's_switch ) such that the signal can only work if everyone in the control centre is already incapacitated, that combined with requiring the signal to be highly encrypted sounds fairly safe I think?