The idea here is that you may have all the masters with just one replica, but a few with multiple replicas. The additional replicas detect when a master remains without replicas because of failures and moves to replicate the master in danger.
This way even if every master in most configurations will have just one replica, the actual safety and partition tolerance over time increases with just a few more nodes in the cluster.
Comment From: huangzhw
Implemented.