Start returns before the first sync response necessarily arrives, so the
disabled case could pass against a client that had simply not synced yet.
Wait for the engine to apply a sync, then require the persistence error
rather than any error, so a not-started engine no longer satisfies it.
Also document that PeerState is a read-only snapshot which shares its mutex
and route map with the recorder.
mlsmaycon
6097296f77