Dying Supervisors

While a Supervisor is disconnected, prevent voters from changing state (i.e., don't let them commit or cast a ballot or enter a new voting session).

 Cancel ballots in flight after selecting random machine logs to load into Supervisor
