Leader actions only on convergence

[ktoso]

Currently leader actions are performed by the leader (note that in a cluster partition there may be more leaders).

Consider if we need to act only on convergence, or if we could take action without.
Write down the tradeoffs.

[ktoso]

Note that for removals we already protect it by "everyone has seen that node as down, so we will start removing it", though only there.