Check for pause minority mode being about to cause a shutdown before sending confirms. In this way we can get rid of the effort to kill all network connections ASAP.
Actually, hold on to confirms when pausing. It's not inconceivable that we might get a false positive from pause_minority_guard, in which case we don't want to throw data away.
Merge bug26293
stable to default