server should shut down on encountering invalid highwatermark file; patched by Yang Ye; reviewed by Jun Rao; kafka-509