Sometimes the most resilient thing a system can do isn't retry