fixes CC-221

  * add timeout to vhost processing in case we miss a zookeeper event
  * remove uses of locks, replace with retries
  * fix ensurePath logic to avoid creating subtree mirrors