Separating agreement from execution for byzantine fault tolerant services