This is one more unit test for failure/recovery, this time with double redundancy, which isn't covered by the other tests. Signed-off-by: NeilBrown <neilb@suse.de>