A Comparison of Three Model Checkers Applied to a Distributed Database Problem