Interesting. So stop or demote really can never fail? Are we relying on the other nodes to kick us out then? OK, that seems to make sense, but hiding all these errors in between really seems harsh. A node that is so broken that it cannot complete this probably deserves to be fenced.