Track offline/online status of nodes.

The last node to leave the space must be the first to come back.  Do not remove
failed nodes, only cleanly shutdown nodes.  If the cluster is read-only, you can
shutdown more cleanly by bringing nodes up in any order.  This commit message
portrays a simplified understanding of what's going on.