[wip] deny writes to slots without active leases without passes

this seems likely to be wrong.
it's probably fine for slot creation but for later writes to a slot it will
probably underestimate the passes required.
we probably have to look at the "data length" of any existing share