Add failure mode if query writes to a TLF more than once

[BrandonHaynes]

Or at least do something sane...