Pinning

consider making this, or maybe the whole `Pinner`, threadsafe

also, I think this is the case now, but important to keep UX of pin operations as succeeding or failing completely. Meaning, if a user pins an object and the cmd returns successfully, it should be flushed all the way into the datastore (even if over daemon)