avoid inconsistency during db blackout