There could be a race between where BackgroundSync::shutdown shuts down RollbackImpl here and where we make it in _runRollbackViaRecoverToCheckpoint here (see BF-32083). Creating the RollbackImpl should also be done while holding the mutex