mon: backport paxos off-by-one bug (9301) to giant

This should go through some testing in master first, I think.  I just hit
the bug again on giant, though, so this does need to get backported at some
point soon.