Improve error rate

* reduce window during which master rejects writes
* never rewrite config to reject writes
Process no longer requires flush on new master

We already make the existing master read-only and flush it before
promoting the new master.