we need to make sure that a ZDB env can always be get back to operational state - even if end of file corrupted - or index half lost we always need to be able to get back to a RW version which has all data which was recoverable