KAFKA-858 High watermark values can be overwritten during controlled shutdown; reviewed by Jun Rao