Stop the whole queue if the alternative is to fail over to an unsynced slave.
Actually, slaves should always delete_and_terminate; when shutting them donw in this case we still don't trust their contents.
Add a policy for this thing
Add boot step!
Cosmetic, and log a warning
Merge bug26150