This is based on my "recover" feature. Without it this PR is useless as the cluster cannot recover from a broken cluster by itself.