Maximum Load and Service delays in a Data-base System with Recovery from Failures