Document healthy-majority restriction on master-failover