I believe the read-write-modify cycle of the metadata when we create a
checkpoint is always done under the schema lock; add an assert, I think
it's dangerous if that's not true.