Given a topology we should be able to calculate a subset of nodes that can be safely removed from the cluster without incurring data loss; those nodes should not include both a primary owner and all replicas for any segment.

This API can be used as an aid for cloud environments when doing scale down operation, and also for non-cloud environments in order to kill the right nodes.