Move FailureStorage to kernel, document and make it always sync to disk