What happens if the standby nimbus has not downloaded everything when it becomes the master?  The current code relies on the topology to be scheduled before the standby downloads anything.  But there is a period of time between when the topology is submitted successfully and when the topology is scheduled where if nimbus goes down for whatever reason the topology will be killed.  This is probably OK to start out with, but would be nice to fix.