control transaction and expiry

The server may crash after knotc zone-commit when the zone expires while control transaction is open.

The severity of this issue is low because:

1. hardly anyone will modify the zone with CTL on a slave
2. even if so, it's improbable that the zone will expire