Safe execute

The commit fix a problem which would lead to let a RejectedExecutionException hit the caller of outbound operations when the EventExecutor was shutdown. I think the correct thing is to just fail the future (or at least try). If the EventExecutor is the same as the one which is assigned to the ChannelPromise a error will be logged.

@trustin please review