a833fba98a
Wrapping state-modifying functions into a `catch_unwind` is wrong -- to do retry after failure, you need to have transactional semantics!