Need special handling for leaders at s+8

[wen-coding]

For example

• cert pool can’t just clean up at root, need to keep the data longer
• need to keep verifying and packing votes even after a cert is constructed
• should probably add a reasonable cutoff though