Allow queuing of switchover/failover

As the two operations can take a long time, making it possible to start the failover process without having to wait for it to complete would make it more comfortable to use. In addition to this, the queued operations could be cancelled if they are at a point where it is possible (e.g. waiting for slaves to catch up).