TOLERATING SLOWDOWNS IN REPLICATED STATE MACHINES