master: Handle exceptions thrown by fs:: functions

Instead of terminating the master server when renaming metadata or
changelog files fails, try some sane fallback.

Change-Id: I266407b112b2c25c6d1ab9169aa104093770509b