Oops allowed_failures lives under matrix