As you mentioned, when the standby takes over the configuration is stored in the memory and the previous configuration on the standby is erased. There is a bug with the local director not replicating its configuration to the standby unit correctly.
That's probably the reason why the standby might have rebooted. I have no idea on how to safeguard the configuration. Any suggestions out there??