We invariant that the assertion thrown during checkpointing had to be a shutdown error. But now that we take locks before taking checkpoints, we can also get interruption errors. We'll need to add the case to the invariant too.

Before that, we'll need to make sure if it's safe to relax the constraint of the invariant.