Harden FLUSH

Make sure no FLUSH is left hanging, e.g. due to the crash of the flush leader after the START-FLUSH round.
In other words, make analyze the code and make sure STOP-FLUSH is eventually called.