* recoveryRunning = true when called from constructor * better exceptions if some things are used to early in FSM and persistent FSM